Senior Director, Cybersecurity GRC

Job not on LinkedIn

🕒 6 days ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

MoneyGram

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💳 Fintech

₿ Crypto

👥 B2C

💰 Corporate round on 2023-09

Fintech • Crypto • B2C

MoneyGram is a global payments and remittance company that operates one of the largest cross-border money-transfer networks combining digital reach with extensive cash access. Trusted by tens of millions of consumers, MoneyGram provides consumer remittances, retail cash payout and digital payment services across 200+ countries and territories with hundreds of thousands of retail locations and billions of digital endpoints. The company also integrates crypto and blockchain technologies—operating scaled stablecoin and crypto-to-cash/cash-to-crypto capabilities and participating as a Solana validator—to modernize and speed cross-border payments while remaining focused on consumer convenience and partner distribution.

📋 Description

• Transform and continuously mature MoneyGram’s global cybersecurity GRC organization • Modernize governance, risk management, compliance, third-party risk, audit, security awareness, and resilience programs • Develop a target-state operating model, multi-year modernization roadmap, service metrics, KPIs, and maturity targets • Define and maintain global cybersecurity policies, standards, frameworks, and governance processes • Lead enterprise cyber risk identification, assessment, quantification, mitigation planning, metrics, KRIs, dashboards, and executive reporting • Oversee regulatory compliance, examinations, audits, certifications, assessments, remediation, and regulatory engagements across operating regions • Own the strategy, implementation, adoption, and optimization of GRC technology platforms including Vanta • Automate evidence collection, control monitoring, risk workflows, policy management, audit readiness, and compliance reporting • Lead global third-party cyber risk management, vendor assessments, monitoring, remediation, and contractual security requirements • Oversee security awareness, education, culture, and human risk management initiatives • Maintain incident response preparedness, crisis management, tabletop exercises, and regulatory reporting readiness • Advise executive leadership and represent cybersecurity with regulators, auditors, customers, and strategic partners • Lead and develop a high-performing GRC organization and establish performance, development, succession, and accountability programs

🎯 Requirements

• 15+ years of experience in cybersecurity, information security, risk management, compliance, audit, or related disciplines • Minimum 7+ years of progressive leadership experience managing large cybersecurity, risk, or compliance organizations • Proven experience transforming and scaling enterprise GRC programs within fintech, payments, banking, financial services, or similarly regulated industries • Experience building and optimizing teams, operating models, and organizational capabilities • Significant experience implementing and operationalizing GRC platforms such as Vanta, ServiceNow GRC, Archer, AuditBoard, OneTrust, or similar technologies • Deep expertise in cybersecurity governance frameworks, regulatory compliance, audit management, and enterprise risk management • Experience leading complex regulatory examinations and engagements across multiple jurisdictions • Strong understanding of AWS, Azure, GCP, DevSecOps practices, and modern technology architectures • Ability to drive large-scale transformation initiatives while managing multiple competing priorities • Demonstrated success influencing executive leadership and operating effectively within matrixed organizations • Exceptional communication and presentation skills, including regulator-facing experience • Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Business, or related field • Preferred certifications: CISSP, CISM, CRISC, CCSP, PCI ISA, ISO 27001 Lead Implementer or Lead Auditor • Preferred experience across multiple continents and regulatory regimes, quantitative cyber risk methodologies, AI governance and AI risk management, publicly traded companies, and automation/process redesign initiatives

🏖️ Benefits

• GRC technology and automation capabilities, including Vanta • Career development pathways and succession plans • Global organization exposure and executive, regulator, auditor, customer, and strategic partner engagement