Director, Cybersecurity, GRC

Form Energy

Director of Cybersecurity & GRC at Form Energy overseeing cybersecurity strategy and IT governance. Leading a team to manage compliance and build secure technology infrastructure.

Posted 6/29/2026full-timeBerkeley • California, Massachusetts, Virginia, West Virginia • 🇺🇸 United StatesLead💰 $199,950 - $293,835 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in leading cybersecurity programs, including endpoint detection and response, identity and access management, and incident response, while ensuring compliance with frameworks such as ISO 27001 and NIST 800-171. Proven ability to lead teams, manage IT governance, risk, and compliance, and effectively communicate with executive leadership.

Highest-signal resume keywords

Cybersecurity LeadershipIT Governance, Risk, And ComplianceIncident Response ManagementControl Framework DesignExternal Audit Liaison

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Endpoint Detection And ResponseManaged Detection And ResponseIdentity And Access ManagementVulnerability ManagementThreat DetectionIncident ResponseControl DesignISO 27001NIST 800-171SOC 2

Soft Skills

People LeadershipExecutive-Grade Communication

Industry Keywords

ITGCCybersecurity ProgramData ClassificationEncryption StandardsIT/OT Security Boundary

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead the cybersecurity program: endpoint detection and response / managed detection and response, email and web security, identity and access management, vulnerability management, threat detection, and incident response
Own IT governance, risk, and compliance
Design a control framework synergistic across ITGC, SOC 2, ISO 27001, and NIST 800-171 / CMMC scopes
Serve as the primary IT liaison to external auditors and readiness advisors
Mature incident response and disclosure governance
Establish data classification, retention, and encryption standards
Partner on the IT/OT security boundary and with product security
Report cybersecurity and compliance posture to leadership and governance bodies
Lead, coach, and develop the cybersecurity and GRC team

Requirements

What you’ll need

10+ years in cybersecurity and/or IT GRC
5+ years in leadership (CISO-track)
Deep ITGC experience — control design, operation, and audit
Breadth across the security program: IAM, EDR/MDR, vulnerability management, incident response
Fluency in recognized frameworks (ISO 27001, SOC 2, NIST CSF / 800-53; NIST 800-171 / CMMC a plus)
Experience as an external-audit liaison
Strong people leadership and executive-grade communication

Benefits

Comp & perks

Health insurance
100% of medical, dental, and vision premiums for full-time employees
80% of healthcare premiums for dependents
At least 12 weeks of paid leave for new parents
Generous vacation policies
Relocation assistance available
Competitive salaries
Stock options