Lead end-to-end planning and execution of complex, multi-year GRC programs
Architect and maintain a unified control framework
Own roadmap and operating cadence for key GRC initiatives
Drive cross-functional alignment among IT, InfoSec, R&D, Legal, Privacy, HR, Facilities and Security stakeholders
Ensure controls are embedded into systems, processes, and services
Lead oversight for internal and external audit planning, evidence collection, and remediation tracking
Design and improve processes for risk identification, assessment, treatment, and reporting
Define and monitor meaningful KPIs for security and compliance programs
Lead process improvement and automation initiatives

Requirements

Experience in security, compliance, or technical program management roles
Several years focused on GRC or security compliance programs
Proven track record leading enterprise-grade implementations of frameworks such as ISO 27001, SOC 2, NIST CSF/800-53/800-171, PCI
Experience driving an organization through ISO 27001:2022 certification and subsequent audits
Deep understanding of risk management practices
Exceptional technical fluency in security controls, cloud and SaaS architecture, enterprise technologies
Proven program management skills: roadmap development, dependency management, stakeholder alignment
Experience in both implementing and operating GRC tools/platforms and automating evidence collection
Excellent written and verbal communication skills

Benefits

A front row seat to life changing CGM technology
Learn about our brave #dexcomwarriors community
A full and comprehensive benefits program.
Growth opportunities on a global scale.
Access to career development through in-house learning programs and/or qualified tuition reimbursement.
An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

GRCISO 27001SOC 2NIST CSFNIST 800-53NIST 800-171PCIrisk managementprogram managementprocess improvement

Soft Skills

leadershipstakeholder alignmentcommunicationcross-functional collaborationroadmap developmentdependency managementtechnical fluencyprocess designaudit planningevidence collection

Certifications

ISO 27001:2022 certification