Senior Manager, GRC

Our Mission: 

6sense is on a mission to revolutionize how B2B organizations create revenue by predicting customers most likely to buy and recommending the best course of action to engage anonymous buying teams. 6sense Revenue AI is the only sales and marketing platform to unlock the ability to create, manage and convert high-quality pipeline to revenue. 

Our People: 

People are the heart and soul of 6sense. We serve with passion and purpose. We live by our Being 6sense values of Accountability, Growth Mindset, Integrity, Fun and One Team. Every 6sensor plays a part in defining the future of our industry-leading technology.  6sense is a place where difference-makers roll up their sleeves, take risks, act with integrity, and measure success by the value we create for our customers. 

We want 6sense to be the best chapter of your career. 

Purpose of the Job:

As members of 6sense’s Security department, the Governance, Risk and Compliance (GRC) team aligns Security with business objectives while managing risks and meeting industry standards, regulations and contractual obligations. GRC designs and enforces governance, implements risk management strategies, and ensures compliance through operating as the second line of defense.

Responsibilities & Accountabilities:

· Continuously improve and enforce a culture of security at 6sense

· Hire and mentor a best-in-class team of GRC Engineers and Managers

· Build strong, collaborative partnerships with People, Legal, Development, Infrastructure, IT and Product teams

· Define, develop, and oversee the implementation of the GRC strategy aligned with broader security and the company's business goals and legal requirements

· Implement risk mitigation strategies and mechanisms to address identified risks and potential non-compliance

· Manage a robust Compliance program, to include: business aligned common control framework, continuous monitoring and auditing that proactively identifies and remediates security gaps, continuously growing certification portfolio

· Manage a robust Risk program, to include: annual operational risk assessments, proactive risk reporting, robust third-party risk assessments

· Manage a robust Governance program, to include: ISO compliant controlled document program, ongoing monitoring of changing regulations and standards, behavior influencing security awareness training

· Oversee deployment and promote continuous improvement of GRC processes, technologies, automations and integrations

· Evolve security policies and procedures to stay aligned with the security industry best practices and customer expectations

· Prepare and deliver meaningful KPIs and metrics representative of the GRC programs

· Design and execute quarterly OKRs and Pick 6 initiatives

Performance Measurement:

· Creates high performing teams tightly aligned with business objectives through strategic planning, expectation setting, and weekly 1 on 1s with direct reports, management and key stakeholders

· Implements security controls considering the latest security threats, trends, and best practices to ensure that 6sense's security posture remains effective and efficient

· Delivers on GRC initiatives within committed timeframes and following communication standards

· Authors project plans for major security initiatives and drive projects to completion within committed timeframes

· Maintains expert knowledge of 6sense’s controls, product/product roadmap, and production architecture

· Enhances and grows skillset of direct reports

· Creates and maintains up to date collateral, metrics and processes

· Operates on behalf of Head of Security

Educational and Experience Requirements:

· 12+ years of experience in information security, with a focus on security assurance

· 3+ years of experience managing a GRC or similar team

· Experience with security tools (e.g., GRC, Vulnerability Scanners, SIEM)

· Extensive knowledge of industry frameworks, regulations and standards, such as: ISO 27001, SOC 2, GDPR, PCI, SOX, NIST 800-53, CCPA, etc.

Preferred Qualifications:

· Bachelor's degree in a related field

· Relevant industry certifications, such as CISSP, CISM, or GIAC, are highly desirable

Competencies and Behaviors:

· Exceptional communication skills, including verbal, written, and presentation skills, and ability to appropriately address audience in communications

· Works independently and asynchronously to manage multiple projects simultaneously

· Influences and collaborates with cross-functional teams

· Translates technical requirement into actionable and timebound requests