Cyber GRC Manager

About the role

This role reports to the Information Security Governance, Risk and Compliance (GRC) Senior Director and partners across Product, Technology, Operations, Legal, Compliance, and Business teams to strengthen and mature Bottomline's information security, risk, and compliance programs. As the Information Cyber GRC Manager, you will serve as a strategic leader responsible for driving governance, risk management, compliance oversight, and client assurance initiatives.

Key responsibilities

• Lead the development, maintenance, and execution of the information security governance program, including policies, standards, and controls aligned with regulatory requirements and industry frameworks.
• Own the cyber risk management program, overseeing the risk register, assessments, treatment plans, and executive reporting, and approve risk acceptance decisions.
• Lead compliance activities and assessments to ensure adherence to regulatory, contractual, and industry requirements, driving audit readiness and remediation.
• Oversee customer security and compliance engagements, including due‑diligence reviews, security questionnaires, contract reviews, and client assurance activities.
• Lead, mentor, and develop a team of Cyber GRC professionals, managing performance, resources, and execution of strategic objectives.
• Lead the evaluation and governance of Artificial Intelligence technologies, establishing AI risk assessment practices and supporting responsible AI adoption.

Required profile

• Bachelor’s degree in risk management, cybersecurity, technology or equivalent.
• Professional certifications such as CISSP, CISM, CRISC, CISA, CGRC, or equivalent.
• Strong knowledge of regulatory and industry frameworks including SWIFT, NACHA, PCI DSS, NIST, and GLBA.
• Experience with AI governance frameworks, AI risk management, and emerging regulatory requirements related to Artificial Intelligence.
• Experience leveraging automation, analytics, and AI‑driven capabilities within security, risk, and compliance programs.