GRC Risk Principal

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.
At LevelBlue, we're on a mission to help the world become a safer and more trusted digital space. Our work supports a diverse and global workforce—so we're building a security team that can match our scale and ambition.

LevelBlue Office of Security and Trust team is responsible for the security of LevelBlue products, platforms, services, and corporate operations. Under the leadership of the Chief Security and Trust Officer, our goal is to serve as a trusted partner and facilitator for business and technical teams across the organization. Through collaboration, we aim to integrate security into core business practices and processes enhancing our overall cyber resilience. We are very excited to expand the Security and Trust team via our search for an experienced and motivated professional to lead and manage the Governance, Risk, and Compliance (GRC) program.

The GRC Principal will provide expert leadership in all matters pertaining to governance, risk management, and compliance, ensuring risk programs are successfully executed to strengthen and sustain trust with LevelBlue customers, staff, and partners across the world. This role will be responsible for successfully driving outcomes in navigating the opportunities and complexities of an international business experiencing organic and inorganic growth. Managing, assessing, and communicating risks with a variety of audiences to strengthen the secure by design culture.
The GRC Principal will report to the Deputy Chief Security & Trust Officer working closely with cyber defense, security engineering, and combination of technical and business leaders across the organization.

Day in the Life as a GRC Principal
• Work with the team and other leaders to refine and manage enterprise-wide security governance and risk management programs and ensure Security and Trust practices align with business objectives, vision, and evolving risks and compliance challenges.
• Design and drive the integrated risk management strategy, framework, tools, and processes.
• Take responsibility as a leader for delivering outcomes and change in the business. This requires the ability to influence and communicate as much as being a subject matter expert.
• Oversee, manage, and communicate risks.
• Govern, optimize, and monitor policies and policy performance.
• Strengthen cross-functional security governance model and effectively run various governance committees to ensure stakeholders align on the risk acceptance level, and priorities to manage risks.
• Work collaboratively with stakeholders like procurement, legal, IT and others to enhance the third-party risk management program and ensure security risks are addressed from evaluation of the vendors/suppliers and contracts negotiation to ongoing assessment of vendors/suppliers' security posture.
• Set the direction and mature the security awareness and training program. Establish an ongoing awareness and training program to strengthen security culture.
• Enhance GRC dashboard and reporting. Continuously analyze risk control effectiveness of the organization, overall security resilience, risk posture improvement, and maturity growth.
• Work closely with business unit leaders and external entities as needed to support Enterprise Risk Management.
As one of the most senior members of Governance, Risk & Compliance, how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following:
• Teamwork, collaboration, and communication: Expressing ideas effectively through speaking, writing, visuals, and non-verbal cues, and listening to understand others.
• Problem solving framework: Simplifying the complex, high quantity, and sometimes contradictory information to effectively drive stronger business outcomes.
• Own the outcomes: Empowered as a leader at LevelBlue, identify key milestones and navigate the pathways for achievement.
Qualifications
• Minimum of 6 years of security experience, with a combined background of technology and compliance, preferred.
• Minimum of 3 years in GRC leadership positions, with experience managing any Security Governance, Risks, and Comp