Cybersecurity Governance Risk and Awareness Manager
Neptune Technology Group•Duluth, GA
•Onsite
About The Position
Neptune is seeking a proactive leader to mature our governance, risk management, and awareness programs across the organization. This role will lead GRC Analyst resources, own policy and procedure development, coordinate risk identification and tracking, support compliance alignment, and deliver engaging security training and awareness campaigns. The ideal candidate will be passionate about strengthening Neptune’s security culture, improving visibility into risk, and helping teams understand and meet security expectations.
Requirements
- Bachelor’s degree (or international equivalent)
- 5+ years in information security, including 2+ years in GRC, risk management, or security awareness roles
- Experience leading teams and managing security programs
- Strong understanding of security frameworks (NIST, ISO, SOC 2, etc.)
- Excellent communicator with experience in cross-functional coordination and executive reporting
- Familiarity with compliance frameworks, risk registers, security policies, cloud environments, and enterprise security processes
Nice To Haves
- CISSP, CISM, or equivalent certification
- Experience with enterprise risk management, cybersecurity awareness programs, and security compliance activities
Responsibilities
- Develop, maintain, and enforce security policies, standards, and procedures
- Manage and mentor GRC Analyst resources
- Coordinate with parent company to ensure governance alignment.
- Coordinate enterprise risk identification, documentation, assessment, and reporting activities
- Partner with control owners to track remediation plans, corrective actions, exceptions, and risk acceptances
- Maintain risk registers and ensure risks have clear ownership, status, due dates, and supporting evidence
- Support risk reviews with Security, Compliance, IT Operations, Product, Engineering, and business stakeholders
- Prepare leadership-ready risk summaries, trends, and updates to support decision-making
- Design and deliver engaging security awareness programs using platforms like KnowBe4
- Develop targeted training for technical and non-technical staff
- Measure and report on training effectiveness and employee engagement
- Lead and manage phishing simulation campaigns to strengthen employee awareness and response
- Deliver actionable metrics on policy adoption, risk posture, remediation progress, and awareness program effectiveness
- Report regularly to executive leadership and Neptune’s parent company
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
