Senior GRC Manager

@ GameStop

About the Role

The Senior GRC Manager at GameStop leads programs to ensure the organization is secure, private, and compliant. Reporting to the CISO, this role directs the GRC team and manages policies, standards, compliance, privacy requirements, security awareness and training, third party risk management, and operational tasks.

What You'll Do

• Provide direction and oversight for global GRC programs.
• Manage GRC operations and projects ensuring timely completion.
• Ensure compliance with regulatory requirements, security frameworks and internal policies.
• Oversee first- and third-party risk management and internal risk registers.
• Manage operations for compliance with consumer privacy requests.
• Review and maintain GameStop’s internal policies and standards.
• Develop internal communications and security training programs.
• Lead and develop members of the GameStop GRC team.
• Track and report performance metrics on the global GRC program.
• Collaborate with security leaders on cross-functional initiatives.

What You'll Bring

The ideal candidate will have at least 6 years of experience in IT GRC, information security, or audit roles, with leadership experience or an advanced degree in cyber security. A bachelor's degree in cyber security, information technology, or a related field is required, with additional experience considered. Experience with global and US privacy regulations, IT general controls, internal audit processes, incident response, compliance standards (such as Sarbanes-Oxley or PCI-DSS) and security frameworks (e.g., NIST CSF) is essential. Strong communication skills for engaging both technical and non-technical partners are required.

Additional Information

This is a full-time position based onsite in Grapevine, TX. GameStop full-time store positions are also eligible for incentive programs, health benefits, paid time off, 401(k), employee discount, a casual work environment, and potentially bonuses or other incentives.

Key skills/competency

• Governance
• Risk Management
• Compliance
• Privacy
• Security Frameworks
• Incident Management
• Team Leadership
• Policy Development
• Audit
• Training