Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 98 days ago

Senior Cyber Security & GRC Lead

Emergent Software16 open roles

Pay
$150,000 – $200,000 a year
Where
Hartford, Connecticut, United States
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Cyber Security & GRC LeadEmergent Software · Hartford, Connecticut, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Emergent Software's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. Emergent Software postings stay open a median of 21 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 98 days ago

Emergent Software median: 21 days open

The posting

**This position is a direct hire for one of our clients. Our ideal candidates live in the Hartford, Connecticut metro area. Eligible candidates must currently reside in the US and authorized to work in the US without visa sponsorship.**

Our client is seeking an experienced Cyber Security & GRC Engineer to lead and mature an enterprise-wide cybersecurity, governance, risk, and compliance (GRC) program across multiple organizations. This is a senior-level, hands-on leadership role responsible for developing a unified security and compliance framework that supports NIST CSF 2.0, GDPR, and SOX IT General Controls requirements.

The ideal candidate combines strategic leadership with technical expertise, comfortably engaging executive stakeholders and auditors while also administering security tools, managing risks, implementing controls, and driving compliance initiatives. This role will serve as the owner of the enterprise GRC platform, Vanta, ensuring continuous monitoring, audit readiness, and program maturity across all entities.

Responsibilities

  • Own and mature the enterprise cybersecurity and risk management program across a multi-entity organization.
  • Design, implement, and maintain a harmonized control framework supporting NIST CSF 2.0, GDPR, and SOX ITGC requirements.
  • Lead enterprise governance activities, including risk reviews, KPI/KRI reporting, executive reporting, and steering committee meetings.
  • Serve as the primary liaison for auditors, assessors, clients, and internal stakeholders regarding security and compliance matters.
  • Administer and optimize Vanta as the enterprise GRC system of record.
  • Configure controls, integrations, tests, evidence collection, continuous monitoring, and audit workflows within Vanta.
  • Develop, maintain, and manage enterprise security policies, standards, procedures, exceptions, and policy lifecycle processes.
  • Lead SOX ITGC readiness and compliance efforts.
  • Operationalize GDPR requirements, including records of processing, DPIAs, data subject rights management, vendor oversight, and breach response.
  • Conduct NIST CSF 2.0 assessments, maturity reviews, gap analyses, and remediation planning.
  • Manage enterprise risk assessments, risk registers, third-party vendor risk programs, and remediation initiatives.
  • Oversee vulnerability management, patch coordination, access reviews, and technical security controls across cloud and on-premises environments.
  • Lead incident response activities, including preparation, detection, containment, recovery, and post-incident reviews.
  • Provide security architecture guidance for new systems, integrations, cloud solutions, and data platforms.
  • Build and manage security awareness, phishing simulation, and employee training programs.
  • Partner with business and project teams to ensure security and privacy requirements are incorporated into solution design.

Required Qualifications

  • Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience.
  • 7+ years of information security, cybersecurity, or risk management experience with progression into senior program ownership responsibilities.
  • Hands-on experience administering a GRC platform, preferably Vanta.
  • Experience implementing, operating, or auditing against NIST CSF, SOX ITGC, and GDPR requirements.
  • Demonstrated success developing and implementing security policies, controls, and governance programs.
  • One or more of the following certifications: CISSP, CISM, CRISC, or CISA.
  • Strong technical knowledge of cloud security, identity and access management, endpoint security, vulnerability management, logging, and security operations.
  • Excellent communication skills with the ability to engage technical teams, business leaders, auditors, and executives.
  • Proven ability to work independently, manage multiple priorities, and drive accountability across stakeholders.

Nice to Have Experience

  • Direct Vanta administration experience.
  • Experience supporting a publicly traded company and SOX Section 404 compliance requirements.
  • Experience leading security programs across multiple organizations or business entities.
  • ISO 27001 Lead Implementer or Lead Auditor certification.
  • SANS/GIAC certifications.
  • Construction, engineering, energy, power generation, or EPC industry experience.
  • Familiarity with AI/ML governance, data security, and secure AI deployment practices.

Our Vetting Process

At Emergent Staffing, we work hard to find the best tech candidates capable of developing high quality results for our clients. If you think you’re one of those, please understand that the effort put into this by people like yourself helps us be successful in surrounding you with other top-notch engineers. Here are the steps of our vetting process for this position:

  • Application (5 minutes)
  • Online Assessment (60 minutes)
  • Initial Phone Interview (30-45 minutes)
  • Virtual Interview with Hiring Manager (30 minutes)
  • Onsite Interview
  • Leadership Team Meeting (if needed)
  • Job Offer!

#EmergentStaffing

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Emergent Software's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Emergent Software's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Emergent Software's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.