Skip to Main Content

Sr Cybersecurity GRC Manager

Dallas, TX
  • Expired: over a month ago. Applications are no longer accepted.
Job Description

Title: Sr Cybersecurity GRC Manager

Location: Remote

Reports to: Chief Information Security Officer (CISO)

Job Purpose: LTK is looking to add a Cybersecurity GRC Manager who can lead our efforts in governance, risk, and compliance responsibilities from a security and technology perspective across the organization. This individual will lead the Security GRC Team and will be directly responsible for implementing, maintaining, and improving policies, procedures, and internal controls to assure compliance with applicable regulatory and legal requirements, as well as best practices.

As a GRC Manager, you'll be working to improve the Security Risk Management Program and work closely with various teams such as DevOps, Engineering, and Product teams. The GRC manager will oversee global security strategy and programs fostering a culture where security is everyone's responsibility. The right person for this role will have experience with guidelines, standards and policies across different businesses and industries.High touch, global organization with exposure to IT systems and helping to build the foundation that will drive business transformation.


The ideal candidate is someone who has:

  • 8 + years of IT/Cybersecurity experience in relevant security domains (e.g. compliance, audit, security risk management)
  • 3+ years of Project Management experience
  • Deep knowledge of and hands-on experience with Amazon Web Services (AWS)
  • Created and built a Project Managing IT Governance, Risk, or Compliance (GRC) process from scratch
  • Experience as the main point of contact for GRC related initiatives and has worked cross-functionally with internal teams: Legal, Privacy, Tech, IT Vendor Management and other business unites
  • Direct experience managing SOC2 readiness activities as well as remediation and certification efforts
  • Managed compliance initiatives across business units e.g. GDPR, CCPA, PCI, Privacy, Internal/External Audits, 3rd Party Vendor Management and SOC2
  • One or more industry certificates e.g. CISM, CRISC, CISA, CIPM, CISSP

Key Responsibilities:

  • Manage the remediation of risks identified through the risk register process and contribute towards improving the overall risk management program. It may include leading annual security assessments, completing written reports of results to be shared with the Executive Leadership Team and other senior leaders.
  • Continuously improve the Information Security Risk Management Program and oversee a Business Continuity Program
  • Develop and maintain all relevant documentation, policies, standards, guidelines and frameworks, embedding controls into processes across the business and technology units.
  • Assists in the early identification of risk trends by establishing and monitoring key performance and key risk indicators via Risk and Business Impact Assessments.
  • Educates risk owners on risk management best practices and works with other risk functions (e.g. Internal Audit and Legal) in the development and implementation of risk controls and treatment plans.
  • Lead the security exception process, including leading the completion of security exceptions, tracking and following up on alternative mitigating action items included within approved security exceptions.
  • Manage relationships with key internal stakeholders providing transparency on broader Information Security program's operational efficiency including timelines and budget
  • Manage the creation of new or leading the maintenance of existing security and privacy policies, standards and specifications to ensure they are current and appropriately aligned with applicable laws, regulations, and the evolution of security risks
  • Support the maintenance and build-out of repositories, tools, and documentation for third party risk assurance

What's in it for you as a team member at LTK?

At LTK, we believe in taking care of our team members and offer competitive compensation and benefits including medical, dental, and vision, paid maternity and paternity leave and a 401k retirement plan with a LTK matching contribution. To make sure our employees stay healthy and balanced, we also offer wellness benefits such as a flexible work schedule plus Summer Fridays (Workday ends at 3pm). We don't forget to have fun either with virtual company happy hours and virtual team events! And last but not least, you get to work on interesting problems that will help disrupt the retail industry!

What you have to look forward to when you work or visit for team huddles at a LTK Office:

  • Fully stocked bars and kitchen (free snacks all day!)
  • Catered meals weekly
  • Monthly Chair massages
  • Laidback office environment
  • Monthly themed Happy Hours!
  • Free access to state of the art gym while working in or visiting our Dallas HQ
  • Free Covered Parking on-site while working in or visiting our Dallas HQ

About Us

As the founder of creator guided shopping, LTK is the trusted and effective platform for creators and their businesses by powering the connection between content and commerce. Founded in 2011 by Amber and Baxter Box, the LTK mission is to empower creators to be as economically successful as possible. World premium lifestyle creators in 150+ countries drive more than $3.6 billion in annual retail sales through their LTK Creator Shop profiles. Today, more than 18 million consumers turn to LTK Creator Shops in the LTK shopping platform each month to find inspiration and instantly shop the styles recommended by their favorite creators. And, more than 6,000 brands partner with LTK to gain access to its global creator network for content that converts against performance-driven, cross-channel KPIs. A three-time honoree on Fast Company's list of Most Innovative Retail Companies, LTK is headquartered in Dallas, TX and currently operates on five continents. To download the LTK shopping app, search for LTK in the App Store or Google Play.

For the latest LTK Creator updates, follow LTK.HQ, and for the latest shopping trends and updates from LTK, follow Shop.LTK.

For US-Based Roles: We are not offering new sponsorships opportunities at this time for persons requiring employment visas, such as an H-1B; authorization to work in the U.S. is a precondition of employment.

Any unsolicited resumes/candidate profiles submitted through our website or to personal email accounts of employees of LTK are considered the property of LTK and are not subject to payment of agency fees.

LTK is an Equal Opportunity Employer.




Dallas, TX