Cybersecurity Governance Risk and Awareness Manager

Neptune is seeking a proactive leader to mature our governance, risk management, and awareness programs across the organization. This role will lead GRC Analyst resources, own policy and procedure development, coordinate risk identification and tracking, support compliance alignment, and deliver engaging security training and awareness campaigns. The ideal candidate will be passionate about strengthening Neptune’s security culture, improving visibility into risk, and helping teams understand and meet security expectations.

• Develop, maintain, and enforce security policies, standards, and procedures
• Manage and mentor GRC Analyst resources
• Coordinate with parent company to ensure governance alignment.

• Coordinate enterprise risk identification, documentation, assessment, and reporting activities
• Partner with control owners to track remediation plans, corrective actions, exceptions, and risk acceptances
• Maintain risk registers and ensure risks have clear ownership, status, due dates, and supporting evidence
• Support risk reviews with Security, Compliance, IT Operations, Product, Engineering, and business stakeholders
• Prepare leadership-ready risk summaries, trends, and updates to support decision-making

• Design and deliver engaging security awareness programs using platforms like KnowBe4
• Develop targeted training for technical and non-technical staff
• Measure and report on training effectiveness and employee engagement
• Lead and manage phishing simulation campaigns to strengthen employee awareness and response

• Deliver actionable metrics on policy adoption, risk posture, remediation progress, and awareness program effectiveness

• Report regularly to executive leadership and Neptune’s parent company

• Risk Management: g. OneTrust or similar risk register and assessment platforms
• GRC & Policy Management: g. OneTrust

• Security Awareness: e.g KnowBe4

• Other:Familiarity with compliance frameworks, risk registers, security policies, cloud environments, and enterprise security processes

• Bachelor’s degree (or international equivalent)

• 5+ years in information security, including 2+ years in GRC, risk management, or security awareness roles

• Experience leading teams and managing security programs
• Strong understanding of security frameworks (NIST, ISO, SOC 2, etc.)
• Excellent communicator with experience in cross-functional coordination and executive reporting

• CISSP, CISM, or equivalent certification

• Experience with enterprise risk management, cybersecurity awareness programs, and security compliance activities

• Typically requires overnight travel less than 10% of the time.

• Duluth, GA

#HP1