Manager, Cybersecurity GRC, Global

About the role

The Manager, Cybersecurity GRC supports the governance, risk, and compliance (GRC) function to strengthen Vantage Data Centers' cybersecurity posture within assigned regions or functional domains. This role contributes to the development, implementation, and execution of security programs, ensuring alignment with industry frameworks and regulatory requirements while supporting risk identification and mitigation activities.

Essential Job Functions

• Support execution of key components of the cybersecurity GRC program, ensuring implementation of policies, standards, and control frameworks within assigned regions or domains
• Contribute to the development, maintenance, and implementation of cybersecurity policies, standards, and procedures aligned to industry frameworks such as ISO 27001, SOC 2, and NIST
• Support the identification, assessment, and prioritization of cybersecurity risks; assist in tracking and execution of risk treatment plans in alignment with defined risk tolerance
• Support audit readiness and execution across internal and external audits, including coordination, evidence collection, and remediation tracking
• Participate in control validation activities to support effectiveness and consistency of cybersecurity controls
• Support development and delivery of GRC metrics, KPIs, and dashboards; assist in reporting compliance posture and risk exposure to leadership
• Affirm adherence to regulatory and customer requirements, including audit support and security-related obligations
• Collaborate with IT, OT, Engineering, Legal, and PMO teams to support integration of governance and compliance controls into operational processes
• Escalate compliance issues, audit findings, and risks to senior leadership as appropriate and support resolution activities
• Provide guidance and direction to team members and contribute to team development efforts
• Contribute to improvements in GRC processes, tools, and automation to enhance efficiency and audit readiness

Job Requirements

• Strong communication skills (verbal and written) with the ability to communicate internally with team members as well as externally with vendors and other service providers
• Data Center experience is strongly preferred, but not required
• Bachelor’s degree in Information Technology, Cybersecurity, or a related field (or equivalent experience)
• Industry certifications such as CISSP, CISM, CISA, or CCSP preferred
• 5+ years of experience designing, implementing, and managing cybersecurity programs, ideally within a data center or critical infrastructure environment
• Strong understanding of security frameworks, compliance requirements, and risk management methodologies
• Hands-on experience with security technologies, including SIEM, firewalls, IDS/IPS, endpoint protection, and vulnerability management tools
• Experience in conducting security assessments, penetration testing, and incident response activities
• Proficiency in Microsoft Office 365 and security-related tools
• Strong analytical, problem-solving, and communication skills to collaborate across departments and with external partners

Physical Demands And Special Requirements

• Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions
• While performing the duties of this job, the employee is occasionally required to stand; walk; sit; use hands to handle, or feel objects; reach with hands and arms; climb stairs; balance; stoop or kneel; talk and hear
• The employee must occasionally lift and/or move up to 25 pounds