Senior Manager, GRC People and Policy

F5
Guadalajara
Workplace: HybridFull timeFunction: Government Affairs & Public PolicyExperience: 8+ yearsEducation: bachelorsSkills: ["Strategic communication","People management","Inclusive leadership","Performance management","Cross-functional collaboration"]

Lead global cybersecurity GRC programs covering risk mitigation, compliance training, vulnerability assurance, and corporate information security policies. Manage a cross-functional squad of analysts and developers, setting OKRs and performance metrics while strengthening F5’s security culture. Own risk profiling and threat modeling support, advance phishing simulation with adaptive learning, and govern the lifecycle of global cybersecurity policies and standards to enable SOC 2, ISO 27001, and regulatory audit readiness.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
F5
F5
2 months ago

Senior Manager, GRC People and Policy

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 18 days agoStatus: Live

Job Summary

Lead global cybersecurity GRC programs covering risk mitigation, compliance training, vulnerability assurance, and corporate information security policies. Manage a cross-functional squad of analysts and developers, setting OKRs and performance metrics while strengthening F5’s security culture. Own risk profiling and threat modeling support, advance phishing simulation with adaptive learning, and govern the lifecycle of global cybersecurity policies and standards to enable SOC 2, ISO 27001, and regulatory audit readiness.
Location: Guadalajara
Workplace: Hybrid
Employment Type: Full time
Job Function: Government Affairs & Public Policy
Seniority: Sr. Manager level

Key Responsibilities

  • •Directly manage and coach a team of four specialized domains: policy & standards development, vulnerability assurance, security training development, and training compliance.
  • •Oversee risk profiling and threat modeling, targeting high-risk internal groups with vulnerability assurance analysts.
  • •Mature the phishing simulation program using adaptive learning paths based on real-time vulnerability data.
  • •Lead corporate security awareness training strategy to fulfill onboarding and annual compliance requirements.
  • •Govern the end-to-end lifecycle of global cybersecurity policies, translating legal/technical/regulatory changes into plain-language rules and securing cross-functional sign-off.

Key Requirements

  • •8+ years of experience in cybersecurity GRC, information security policy, or security awareness management.
  • •3+ years of direct people management experience leading technical and non-technical teams in a corporate environment.
  • •Proven experience building and scaling people risk or vulnerability assurance programs in tech or security industries.
  • •Bachelor’s degree in Cybersecurity, Computer Science, Technical Communications, or related field (or equivalent professional experience).
  • •Preferred certifications: CISSP, CISM, CRISC, or SANS Security Awareness Professional (SSAP).
Experience:8+ yearsCybersecurityGRCInformation securitySecurity awarenessSecurity policy
Education:Bachelor's in Cybersecurity, Computer Science, Technical Communications, or a related field
Skills:Strategic communicationPeople managementInclusive leadershipPerformance managementCross-functional collaboration
Certifications:CISSPCISMCRISCSANS Security Awareness Professional (SSAP)

Company Brief

F5
Provides application delivery networking, load balancing, and security solutions for on-premises and cloud environments, helping organizations optimize, secure, and scale applications and APIs across multi-cloud infrastructures.
Industry: Networking Equipment
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Seattle, United States
Founded: 1996
Glassdoor
Glassdoor: 3.8
WebsiteLinkedIn