Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Cybersecurity Governance, Risk and Compliance Manager role.

Rezi rewrites your resume against SF Fire Credit Union's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Cybersecurity Governance, Risk and Compliance Manager posting at SF Fire Credit Union — free, in seconds.

About the Role

SF Fire Credit Union is seeking a full-time Cybersecurity Governance, Risk and Compliance Manager to provide independent oversight of the Credit Union’s cybersecurity risk. This role reviews IT cybersecurity practices and control effectiveness, challenges decisions to defer remediation or accept risk, and ensures material cybersecurity issues reach the appropriate decision makers.

Responsibilities

Independently review IT cybersecurity practices, policies, configurations, procedures, and control effectiveness
Assess whether IT’s response to emerging vulnerabilities, security advisories, and threat intelligence is timely and proportionate to the institutions risk exposure
Recommend improvements to IT controls, processes, resource allocation, and remediation plans
Challenge decisions to defer remediation or accept cybersecurity risks and require documented justification and appropriate risk acceptance
Establish expectations for sharing material cybersecurity information among IT, Information Security, Marketing, Compliance, Legal, Business Leadership, and affected functions
Verify that relevant stakeholders are notified when a threat may affect the organization, its website, customer-facing systems, confidential information, or business operations
Ensure that threat assessments and recommended actions are communicated to the appropriate decision makers, with clear ownership and deadlines
Independently monitor remediation of identified cybersecurity weaknesses and verify completion of material corrective actions
Maintain a risk-based register of significant cybersecurity issues, remediation commitments, overdue actions, and accepted risks
Escalate material or overdue issues to the CRO and, when appropriate, the CEO or the appropriate board committee
Provide periodic reporting on cybersecurity risk exposure, control effectiveness, incident response, phishing trends, and outstanding remediation

Requirements

Required 7+ years of progressive cybersecurity experience or related experience in IT, Compliance, or Audit
The role should operate independently of the CIO and IT management reporting lines.
It should have sufficient access to relevant systems documentation, policies, incident records, assessment results, and personnel to perform its oversight responsibilities.
The role should have the authority to request corrective action plans, challenge proposed remediation timelines, recommend additional safeguards, and escalate unresolved concerns without IT management approval.
Where a material risk requires immediate protective action, the role should be empowered to recommend urgent containment measures and invoke a defined escalation process.
Any authority to direct or suspend technology operations should be explicitly established in the organization's governance framework, including clear decision rights, emergency procedures, and coordination requirements with the CIO and CRO.
The role should be appropriately resourced for the institution’s size and risk profile.
The initial structure may be a dedicated Cybersecurity Governance, Risk and Compliance Manager or an appropriately qualified individual with a clearly defined mandate, provided the necessary independence, expertise, and authority are maintained.

Skills

Deep cybersecurity expertise
Sound judgment
Ability to communicate clearly and challenge constructively across IT, Information Security, Compliance, Legal, and business leadership

Location

San Francisco

Work Type

Full-time

Experience Level

7+ years of progressive cybersecurity experience or related experience in IT, Compliance, or Audit

Education Level

Bachelor’s degree in Information Security, Computer Science or related field
Advanced degree preferred

Salary/Compensations

$144,800 to $217,000

Benefits

401(k) and Employer Match
Health, Vision, Dental and Life Insurance
Annual Incentive/Bonus Program
Tuition Reimbursement Program
11 Paid Holidays + Competitive PTO package
Home & Consumer Loan Program (Discounted Rates)
Professional development and training programs
On-demand personal coaching resource
Wellness Program (Discounted Gym Membership)

About the Company

In 1951 SF Fire Credit Union first opened its doors from a modest 10′ × 15′ office space in 17 Engine.
Today, the San Francisco-based credit union has grown to $1.7B in assets and a membership that extends from the regional firefighters we trace our roots back to throughout our many neighbors in San Francisco, San Mateo and Marin Counties.
Our members benefit from the ideas and principles that have shaped us: Shared trust, continuous innovation of products and services, competitive rates, and excellent member service.
We value a good sense of humor, are motivated by a higher purpose, and always bring an “in-this-together” attitude.
While we’re driven to do great work, we also value real work/life balance.
We genuinely care our employees and we strive to invest in their professional and personal growth.
We’re a relatively small organization at about 200 employees, so you can see the impact of your efforts and the value your contributions bring to our members and fellow employees.

Equal Opportunity

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.