Cyber Security and GRC Lead

About Global Knowledge Build a career where learning never stops. Global Knowledge is one of the largest independent IT and business education providers in the world, and we're looking for energetic professionals to join our award-winning team. Global Knowledge builds the people, that organizations need for their next chapter — in IT, engineering, and business — and stands behind whether they can actually do the work. For 30 years, we've helped teams navigate every major technology shift, from client-server to cloud to AI, backed by a global network of 900+ real-world experts and delivery in 150+ locations worldwide. We work where capability isn't optional — financial services, healthcare, federal and defense, telco — wherever organizations are investing in AI, cloud, and security, we build the people who put it to work. Join us to help write that next chapter. The Opportunity: Global Knowledge is hiring a hands-on Cyber Security and GRC Lead to own end-to-end security posture. This role combines governance ownership with practical technical security leadership. The role is accountable for customer trust activities, audits, risk governance, and POA&M delivery, while also driving cloud, application, and operational security improvements. This is a high-autonomy individual contributor leadership role with direct CIO visibility. What You Will Own Cyber and GRC operating model across risk, controls, policies, and assurance. Customer security questionnaires and trust responses. Audit readiness, audit support, and closure of findings. POA&M lifecycle: define, prioritize, track, and close. Enterprise Risk Committee cadence, decisions, and follow-through. Security architecture and technical risk review for key initiatives. Vulnerability and remediation governance across infrastructure, cloud, and applications. Incident readiness, post-incident corrective actions, and control hardening. Security KPI and executive reporting to CIO and leadership. Key Responsibilities Build and run an annual security calendar covering audits, evidence refresh, control testing, and governance forums. Maintain a live risk register with clear ownership, treatment plans, and escalation paths. Define remediation SLAs and drive cross-functional closure of high- and medium-risk findings. Partner with Engineering and DevOps to strengthen secure SDLC practices, including code scanning and dependency risk management. Establish and improve cloud security baselines, access controls, logging, encryption, and privileged access hygiene. Lead security review and sign-off process for major architectural or platform changes. Improve quality and turnaround time of customer assurance responses using reusable evidence and standard narratives. Deliver monthly executive posture updates with clear trend analysis and decision points. What You’ll Bring Required Qualifications 8-12+ years of experience across cyber security, including both GRC and technical security delivery. Proven ownership of audits and assurance programs (for example ISO 27001, SOC 2, customer audits). Demonstrated experience implementing technical controls in cloud, application, and operational environments. Strong knowledge of risk management, POA&M governance, and control lifecycle management. Ability to lead outcomes across teams without direct line authority. Strong communication skills for technical, business, and executive audiences. Preferred Qualifications Experience in SaaS, enterprise software, or customer-assurance-heavy industries. Experience working with distributed teams across EMEA and global time zones. Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 LA/LI, or equivalent practical expertise. What We Offer · Competitive compensation and comprehensive benefits package. · Professional growth and development opportunities. Our Hiring Process In collaboration with our recruitment team, AI tools may be used to help assess applications, though they never replace human judgement. Our process: recruiter screen, technical interview where applicable, leader interview, team interview, and an offer pending successful reference and background checks. How to Apply To apply, please email your CV to [redacted email] with the job title in the subject line. Please note that only candidates selected for an interview will be contacted. Equal Opportunity statement Global Knowledge is committed to building a diverse and inclusive team. We welcome applications from all qualified candidates regardless of race, gender, age, religion, disability, sexual orientation, or any other protected characteristic. We encourage you to apply even if you don't meet every qualification listed. Privacy Notice Any personal information you provide during the recruitment process will be processed in accordance with applicable data protection legislation and our Privacy Notice Legal Terms of Service | Global Knowledge. Show more Show less