Sr Cybersecurity Governance, Risk and Compliance Manager

Is it surprising to hear that a financial institution of 1.5 million members and over $30 billion in managed assets say that success comes from focusing on people, not profits?

Our “people helping people” philosophy has guided us since 1935, driving our deep commitment to serving our members, communities, and each other. When you join our team, you become part of a purpose-driven organization where your work makes a real difference.

While we’re proud of our history, we’re even more excited about our future. With business and technology transformation on the horizon, there’s never been a better time to be part of BECU.

You bring more than your expertise to your role, and that matters here. Your story, perspectives, and lived experiences help shape belonging at BECU and deepen how we connect with and support our employees, our members, and our communities.

As a Senior Cybersecurity Governance, Risk and Compliance (GRC) Manager, you’ll play a key role in strengthening how BECU protects its members, information, and financial assets through effective cybersecurity governance and control oversight. You’ll help shape and mature our cybersecurity governance program, translating frameworks and regulatory expectations into practical standards, controls, and scalable ways of working across the organization. As a senior individual contributor, you’ll help establish second-line cybersecurity control oversight, advance Continuous Control Monitoring (CCM), and partner with teams to identify and remediate control gaps. You’ll also have an opportunity to modernize GRC through AI, automation, reporting, and connected workflows that reduce manual effort and provide better visibility into cybersecurity risk. Your expertise and ability to influence across cybersecurity, technology, Compliance, and emerging AI governance will help strengthen BECU’s security and resilience.

• →Typically requires a Bachelor’s degree in Information Security, Computer Science or related field, or equivalent work or education-related experience. Advanced degree preferred.
• →Typically requires 7 years of cybersecurity experience or related experience in IT, Compliance, or Audit.
• →Expertise leveraging established GRC frameworks, such as Federal Financial Institutions Examination Council (FFIEC) guidance, Graham Leach Bliley Act (GLBA) controls, Payment Card Industry Data Security Standard (PCI/DSS) controls, Sarbanes- Oxley (SOX), NIST CSF and other relevant laws and regulations; especially in the use of frameworks to increase cybersecurity maturity capabilities and its application in an enterprise environment required.

• One or more of the following certifications, or equivalent certifications, preferred: CISSP, CCSP, CISM, GIAC, CISA, CRISC, or PCI-related certifications, including PCIP, ISA, or QSA.
• Demonstrated ability to collaborate and influence stakeholder and partner organizational leadership and management, including vendors and third parties required.
• Working knowledge of governance, risk, and compliance (GRC) tools and automation of risk evaluation, integration with enterprise risk functions, and reporting required.
• Understanding of information and security systems to identify risk exposure, including third party-related cyber risk.
• Ability to work independently, and as a team member, while using discretion in decision making and sound judgment in problem solving.
• Ability to set goals and objectives pertaining to training needs and lesson plans, effectively present programs, and provide training materials to individuals and groups.
• Working knowledge of the role of firewalls, vulnerability management, penetration testing, server and desktop configuration and controls, and encryption.
• Demonstrated ability to share knowledge and assist others in understanding technical and business topics.

Ready to make an indelible impact? Eager to be a part of a collaborative and innovative team where your ideas and contributions don’t just fill a role, but fuel the growth and success of BECU?

BECU is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, veteran status, disability, sexual orientation, gender identity, or any other protected status.