ZipRecruiter

Log In

1

Director Cyber Security Grc Jobs (NOW HIRING)

Form Energy

Director, Cybersecurity & GRC

Berkeley, CA · On-site

$199K - $293K/yr

Role Description As Form Energy matures and scales, the Director of Cybersecurity & GRC builds and leads our cybersecurity and IT governance, risk, and compliance programs. This is a CISO-track ...

Jobtailor

Director, Cybersecurity, GRC

California, MO · On-site

$170 - $210/hr

Lead, coach, and develop the cybersecurity and GRC team Requirements * 10+ years in cybersecurity and/or IT GRC * 5+ years in leadership (CISO-track) * Deep ITGC experience -- control design ...

Consumer Direct Care Network

OR · Hybrid

Description & Requirements Culture Vision at Consumer Direct Care Network At CDCN, we strive to ... JOB SUMMARY The Cybersecurity GRC Analyst II plays a key role in supporting the organization ...

CONSUMER DIRECT CARE NETWORK

OR · Hybrid

Description & Requirements Culture Vision at Consumer Direct Care Network At CDCN, we strive to ... JOB SUMMARY The Cybersecurity GRC Analyst II plays a key role in supporting the organization ...

Mercyhealth

Cybersecurity GRC Analyst

Janesville, WI

$85K - $137K/yr

Performs targeted cybersecurity risk assessments to identify vulnerabilities, misconfigurations ... Prefer experience in a healthcare or other highly regulated industry with direct exposure to HIPAA ...

New

PSEG

Director of Cybersecurity - GRC

Newark, NJ · On-site

$116K - $156K/yr

Job Summary The Director, Cybersecurity Governance, Risk, and Compliance leads the development, implementation, and ongoing coordination of enterprise-wide Cybersecurity Governance, Risk, and ...

next page

Showing results 1-20

All JobsCyber Security Grc JobsDirector Cyber Security Grc Jobs

Director Cyber Security Grc information

See salary details

$57K

$133K

$186K

How much do director cyber security grc jobs pay per year?

As of Jul 27, 2026, the average yearly pay for director cyber security grc in the United States is $132,962.00, according to ZipRecruiter salary data. Most workers in this role earn between $111,000.00 and $150,000.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Director of Cyber Security GRC, and why are they important?

To thrive as a Director of Cyber Security GRC, you need deep expertise in governance, risk management, compliance frameworks (such as ISO 27001, NIST, or SOC 2), and a relevant degree or certifications like CISSP or CISM. Familiarity with risk assessment tools, GRC platforms (e.g., Archer, ServiceNow), and security auditing systems is crucial. Outstanding leadership, strategic thinking, and the ability to communicate complex security issues to both technical and non-technical stakeholders are key soft skills. These capabilities are vital to ensure an organization’s security posture aligns with regulatory requirements and business objectives while fostering a culture of risk awareness.

What is the difference between Director Cyber Security Grc vs Cyber Security Manager?

AspectDirector Cyber Security GrcCyber Security Manager
CertificationsCISSP, CISM, CRISCCISSP, CISM, CISA
Work EnvironmentStrategic, policy-focused, executive levelOperational, team management, technical focus
ResponsibilitiesOversees governance, risk, compliance frameworksManages security teams, implements security measures
Industry UsageCommon in large organizations, compliance-heavy sectorsWidely used across various organizations for security operations

The main difference between a Director Cyber Security Grc and a Cyber Security Manager lies in scope and focus. The Director Grc is responsible for strategic governance, risk management, and compliance at an executive level, while the Cyber Security Manager handles day-to-day security operations and team management. Both roles require similar certifications but differ in their strategic versus operational focus.

What does a Director of Cyber Security GRC do?

A Director of Cyber Security GRC (Governance, Risk, and Compliance) leads the development and management of an organization's cybersecurity governance, risk management, and compliance programs. They ensure that security policies align with business objectives and regulatory requirements, assess cyber risks, and implement strategies to mitigate them. Additionally, they oversee compliance with industry standards and frameworks, manage audit processes, and foster a security-aware culture across the organization. This role typically involves working closely with executive leadership, IT teams, and external auditors.

What are some common challenges faced by a Director of Cyber Security GRC when aligning security initiatives with business objectives?

A Director of Cyber Security GRC often encounters challenges in balancing robust risk management practices with the need for business agility and innovation. Translating technical security requirements into business language that resonates with executive leadership and stakeholders is crucial, as is ensuring that compliance efforts do not hinder operational efficiency. Additionally, keeping up with evolving regulatory standards and integrating them into the organization's existing processes can be complex. Effective collaboration with IT, legal, and business units is essential to ensure that security initiatives support, rather than impede, overall business goals.
More about Director Cyber Security Grc jobs
What cities are hiring for Director Cyber Security Grc jobs? Cities with the most Director Cyber Security Grc job openings:
What are the most commonly searched types of Cyber Security Grc jobs? The most popular types of Cyber Security Grc jobs are:
What states have the most Director Cyber Security Grc jobs? States with the most job openings for Director Cyber Security Grc jobs include:
What job categories do people searching Director Cyber Security Grc jobs look for? The top searched job categories for Director Cyber Security Grc jobs are:
Director Cyber Security Grc jobs near you
Infographic showing various Director Cyber Security Grc job openings in the United States as of July 2026, with employment types broken down into 95% Full Time, 3% Part Time, and 2% Contract. Highlights an 88% Physical, 4% Hybrid, and 8% Remote job distribution, with an average salary of $132,962 per year, or $63.9 per hour.
Director, Cybersecurity & GRC

Director, Cybersecurity & GRC

Form Energy

Berkeley, CA • On-site

$199K - $293K/yr

Full-time

Medical, Dental, Vision, PTO

Posted 26 days ago

Job description

Are you ready to build America's energy future? Form Energy is an American manufacturing and energy technology company. We're revolutionizing energy storage with cost-effective, multi-day technology designed to keep the electric grid secure and reliable, even during extended periods of stress. By strengthening the electric system and reimagining what's possible, we're giving clean energy a whole new form!
In recent years, Form Energy has earned a number of accolades, including being named by TIME as a "Best Invention", MIT Technology Review as a "Top Climate Tech Company To Watch", and Fast Company as "One of the Next Big Things In Tech". We are making rapid progress on our mission of delivering energy storage for a better world, and our team is growing just as rapidly to meet demand. We have signed contracts with leading electric utilities across the United States and production of our iron-air batteries is underway at our first high-volume manufacturing facility in West Virginia.
Working for Form Energy is more than just a job, it's a chance to be part of something extraordinary. And now - right as we significantly scale up battery manufacturing - might be the most exciting moment in the company's history to join. We are assembling a team of highly talented and driven individuals across the country. Driven by our core values of humanity, excellence, and creativity, our team is determined to deliver on our mission and transform the energy landscape for the better.
Feeling energized to make a meaningful impact on the world? Then keep reading - you've come to the right place.
Role Description
As Form Energy matures and scales, the Director of Cybersecurity & GRC builds and leads our cybersecurity and IT governance, risk, and compliance programs. This is a CISO-track leadership role: you will set strategy and lead a team - a GRC Manager who owns IT general controls end-to-end, a Staff Security Engineer, and a Senior Security Engineer - while owning the security program, the policy and standards lifecycle, enterprise IT risk, and the external-audit relationship. You will mature an ISO 27001-aligned information security management system and the controls a maturing, compliance-intensive company depends on, backstopped by an external advisor.
This is a hybrid role, which will require working onsite from one of our office locations 3+ days per week.
Relocation assistance is available.
What you'll do:
  • Lead the cybersecurity program: endpoint detection and response / managed detection and response, email and web security, identity and access management, vulnerability management, threat detection, and incident response; manage security vendors and the managed SOC.
  • Own IT governance, risk, and compliance - directing a GRC Manager who owns ITGC design, operation, and evidence end-to-end; the policy and standards lifecycle within an ISO 27001-aligned ISMS; the enterprise IT risk register; control mapping; and exception/issue tracking.
  • Design a control framework synergistic across ITGC, SOC 2, ISO 27001, and NIST 800-171 / CMMC scopes as required by the business and customer contracts.
  • Serve as the primary IT liaison to external auditors and readiness advisors - driving audit readiness, supporting fieldwork, and tracking remediation to closure; direct the external advisor backstop.
  • Mature incident response and disclosure governance: incident response plan and tabletop exercises, and the cyber incident-disclosure and materiality-determination process in partnership with Legal, Finance, and IT, aligned to applicable regulatory and disclosure obligations.
  • Establish data classification, retention, and encryption standards, and a vendor / third-party security risk program.
  • Partner on the IT/OT security boundary and with product security, without owning operational technology or on-product (battery) cybersecurity.
  • Report cybersecurity and compliance posture to leadership and governance bodies in clear, decision-ready terms.
  • Lead, coach, and develop the cybersecurity and GRC team; hire selectively against clear capability gaps.

What you'll bring:
  • 10+ years in cybersecurity and/or IT GRC, including 5+ years in leadership (CISO-track).
  • Deep ITGC experience - control design, operation, and audit - in a compliance-intensive or scaling-company setting, with the judgment to direct a GRC Manager and external advisors.
  • Breadth across the security program: IAM, EDR/MDR, vulnerability management, and incident response, with fluency in recognized frameworks (ISO 27001, SOC 2, NIST CSF / 800-53; NIST 800-171 / CMMC a plus).
  • Experience as an external-audit liaison, plus policy authorship and lifecycle ownership.
  • Strong people leadership and executive-grade communication, including board-quality reporting.
Preferred Qualifications:
  • Experience in manufacturing, energy, or critical-infrastructure sectors.
  • Experience standing up a first-time formal IT controls environment in a scaling company.
  • Certifications such as CISSP, CISA, CISM, or CRISC.
  • Familiarity with privacy regimes (GDPR / CCPA) and AI governance frameworks (Form Energy's AI governance is led separately within the Chief Digital Officer organization; this role collaborates rather than owns it).

#LI-Hybrid
#LI-CB1
Humanity is a cornerstone of Form Energy's culture, and we make sure our compensation and benefits reflect that. Form Energy offers competitive salaries, stock options, and a holistic benefits package to ensure all employees have what they need to thrive while working here.
When it comes to you and your family's health, we cover 100% of medical, dental, and vision premiums for full-time employees - and 80% of healthcare premiums for dependents. This starts from day one. We also offer at least 12 weeks of paid leave for new parents (up to 20 weeks for birthing parents), and generous vacation policies to give employees time to recharge when needed.
To build America's energy future, we need everyone at the table. We are proud to be an equal opportunity employer, and encourage candidates from all backgrounds to apply to our open jobs.
If you may require reasonable accommodations to participate in our interview process, please contact accommodations@formenergy.com. Requests for accommodations will be treated with discretion.
Form Energy is committed to maintaining the privacy of our applicants. Please be aware that we will never solicit sensitive personal information such as Social Security numbers or bank account details during the recruiting or hiring process.

Apply