Director, Cyber GRC

Location

------------

United States

Employment Type

-------------------

Full time

Location Type

-----------------

Remote

Department

--------------

Information Technology

Reports to

Chief Information Security Officer (CISO)

Position Overview

Join Mariner as the Director, Cyber GRC, where you will play a mission-critical role protecting the organization by shaping and executing our cybersecurity governance, vendor risk, and security awareness strategies. You’ll lead high-impact teams, collaborate across business units, and drive enterprise-wide initiatives to ensure we are not only compliant but ahead of the curve in protecting our people, assets, and stakeholders. If you thrive in dynamic environments and want to make a visible difference at a leading financial firm where innovation meets stewardship, this is your opportunity.

Key Responsibilities

• Champion and build the Cyber GRC function, from vision through execution—including the creation and optimization of cybersecurity policy, control framework implementation (NIST CSF 2.0, CIS Controls v8, ISO 27001), compliance monitoring, and audit readiness tailored for SEC, FINRA, and state regulations like NYDFS.
• Lead the third-party vendor risk management program, embedding cybersecurity into every aspect of the vendor lifecycle. Conduct vendor security assessments, ensure rigorous contract requirements, and partner with procurement and AI review teams to keep risk management agile and integrated with business needs.
• Design, mature, and execute a high-impact security awareness and training program, combining role-based curricula, engaging phishing simulations, and innovative culture-building initiatives to tangibly reduce human-factor risk.
• Spearhead AI governance within cybersecurity: create forward-thinking policies for acceptable use, risk-tiering for use cases, and robust oversight of third-party AI tools. Ensure the org