Manager, IT & Cybersecurity GRC

Responsibilities

• Lead and execute the IT SOX program, including annual scoping, risk assessments, and deficiency remediation
• Own and improve the IT General Controls (ITGC) framework ensuring alignment with SOX and COSO standards
• Serve as the primary liaison to Internal and External Audit
• Drive the evolution of the Enterprise Risk Management (ERM) program for IT and Cybersecurity risks
• Translate technical risks into business-relevant insights for executive stakeholders
• Author and maintain IT and cybersecurity policies, standards, and procedures
• Review and assess third-party risk through SOC1/SOC2 reports
• Lead and develop a small team to foster growth and accountability

Requirements

• 6+ years of experience in integrated audit, regulatory compliance, cybersecurity GRC, or risk management
• Experience owning and executing IT SOX / ITGC programs in a public company
• Hands-on experience with risk management frameworks such as COSO, NIST RMF, or ISO 27001
• Proven ability to lead cross-functional initiatives across Finance, Audit, and Engineering
• Experience managing audits and serving as a primary point of contact for auditors
• Bachelor’s Degree in Accounting, Information Systems, Cybersecurity, or a related field

Preferred Qualifications

• Professional certifications such as CPA, CISA, CISSP, or CRISC
• Background in public accounting (Big 4 or large regional firm)
• Experience in regulated industries such as healthcare or diagnostics
• Experience implementing GRC tools and driving automation
• Strong executive communication skills

About the Company

Veracyte (Nasdaq: VCYT) is a global diagnostics company whose vision is to transform cancer care for patients all over the world through high-value genomic and clinical insights.