3 weeks ago

Senior Manager, GRC People and Policy

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Lead global cybersecurity GRC programs covering risk mitigation, compliance training, vulnerability assurance, and corporate information security policies. Manage a cross-functional squad of analysts and developers, setting OKRs and performance metrics while strengthening F5’s security culture. Own risk profiling and threat modeling support, advance phishing simulation with adaptive learning, and govern the lifecycle of global cybersecurity policies and standards to enable SOC 2, ISO 27001, and regulatory audit readiness.

Location: Guadalajara

Workplace: Hybrid

Employment Type: Full time

Job Function: Government Affairs & Public Policy

Seniority: Sr. Manager level

Key Responsibilities

•Directly manage and coach a team of four specialized domains: policy & standards development, vulnerability assurance, security training development, and training compliance.
•Oversee risk profiling and threat modeling, targeting high-risk internal groups with vulnerability assurance analysts.
•Mature the phishing simulation program using adaptive learning paths based on real-time vulnerability data.
•Lead corporate security awareness training strategy to fulfill onboarding and annual compliance requirements.
•Govern the end-to-end lifecycle of global cybersecurity policies, translating legal/technical/regulatory changes into plain-language rules and securing cross-functional sign-off.

Key Requirements

•8+ years of experience in cybersecurity GRC, information security policy, or security awareness management.
•3+ years of direct people management experience leading technical and non-technical teams in a corporate environment.
•Proven experience building and scaling people risk or vulnerability assurance programs in tech or security industries.
•Bachelor’s degree in Cybersecurity, Computer Science, Technical Communications, or related field (or equivalent professional experience).
•Preferred certifications: CISSP, CISM, CRISC, or SANS Security Awareness Professional (SSAP).

Experience:8+ yearsCybersecurityGRCInformation securitySecurity awarenessSecurity policy

Education:Bachelor's in Cybersecurity, Computer Science, Technical Communications, or a related field

Skills:Strategic communicationPeople managementInclusive leadershipPerformance managementCross-functional collaboration

Certifications:CISSPCISMCRISCSANS Security Awareness Professional (SSAP)

Company Brief

Provides application delivery networking, load balancing, and security solutions for on-premises and cloud environments, helping organizations optimize, secure, and scale applications and APIs across multi-cloud infrastructures.

Industry: Networking Equipment

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Seattle, United States

Founded: 1996

Glassdoor: 3.8

Website LinkedIn

Loading job details...

Preparing the role view and application actions.