Senior GRC Program Manager

Job offer

Your Role at Cabot

This role owns the design and operation of Cabot’s global IT and Security governance model, ensuring consistent control definition, evidence expectations, and risk representation across all regions and operating environments, while accommodating regional regulatory requirements, including near-term NIS2 initiatives.

How You Will Make an Impact

Governance Authority (Non‑Negotiable)

Owns the globally unified IT & Security control framework and governance model.
Defines control ownership, execution expectations, and auditable evidence requirements.
Ensures controls are demonstrable end‑to‑end across regions and environments.
Represents IT and Security risk within enterprise risk forums (does not own ERM).
Controls must be supported by specific, attributable, and repeatable evidence sufficient to demonstrate effectiveness end‑to‑end.

Key Responsibilities

Operate a globally consistent control and evidence model (control → owner → system → artifact).
Lead global IT & Security risk identification, assessment, and risk register management.
Develop globally enforceable policies, standards, and exception governance.
Define control execution, validation, and evidence expectations as part of the global governance model, not as an external or regional dependency.
Define control assurance and validation methods to measure effectiveness and audit readiness.
Govern third‑party risk using a consistent global assessment, remediation, and exception management model.
Provide governance oversight for ServiceNow IRM as a global platform.
Translate technical and control risk into business‑relevant insight for executive leadership.

What You Will Bring to Cabot

7–10+ years in GRC, Information Security, or IT Risk Management.
Experience designing and operating global governance and control frameworks.
Strong knowledge of NIST, ISO 27001, NIS2, and SOX ITGC.
Hands‑on experience with ServiceNow IRM.
Excellent English skills, both verbal and written.

Experience That Strongly Aligns

GRC consulting or managed services environments.
Global industrial or manufacturing operations.
Operational technology (OT) and industrial control environments.

How You Operate

Highly structured and systematic; designs governance that functions on a global scale.
Translates regulatory and technical requirements into practical, enforceable control models.
Operates with a strong governance and accountability mindset.
Balances near‑term regulatory demands with long‑term program maturity.
Maintains audit readiness as a byproduct of disciplined control execution and evidence quality.

Measures of Success

Adoption of a unified global IT & Security control framework.
Improved control effectiveness and audit outcomes.
Effective global third‑party risk governance.
Accurate, decision‑ready IT and Security risk reporting to leadership.
Sustained audit readiness through evidence quality.

Additional Information

This is a 90% remote role, with approximately 10% of the time required on-site at our Valmez location.
Salary range: 1,242,600 CZK – 1,739,700 CZK per year. The final salary will depend on the candidate's previous experience and qualifications.

How We’ll Support Your Success:

Dynamic, Flexible, Team Environment – We are working smart, collaborative, and we are doing really meaningful work.
Growth – While you will be helping other grow through Talent Management and Development programs, you will have opportunity to grow and develop as well. We are passionate about personal development, peer support, and the ability to personally grow skills sets.
Flexible Work Environment – The autonomy to manage your schedule and ensure you are delivering on meaningful work with a balanced approach!
Benefits, Vacation, Etc. – We offer a competitive package of benefits.
Feedback – We are committed to giving and receiving feedback in a direct and open fashion that supports and promotes your success.
Support – You will be a part of a team that is impacting the direction of the company’s talent, a team that builds you up personally and professionally. Our success depends on your success.