Cybersecurity GRC Manager

Your Job

Koch Engineered Solutions (KES) is looking for a Cybersecurity GRC Manager to join our global IT capability.

This is a unique opportunity to build and scale a global cybersecurity GRC program in a complex industrial environment with direct exposure to executive leadership.

Reporting to the KES CISO, this role will help strengthen how KES manages cybersecurity risk, compliance obligations, and governance practices to support operational resilience, customer trust, and business decision-making.

This position can be based in Wichita, KS; Tulsa, OK; Houston, TX; or Scottsdale, AZ, and is eligible for a hybrid work schedule.

Domestic and international travel of up to 10% may be required .

This position is not eligible for visa sponsorship.

Our Team

The KES IT capability partners with the KES businesses to apply technology in ways that improve performance, manage risk, and support long-term business objectives.

Within IT, the KES cybersecurity capability works in close partnership with other IT functions, the Koch cybersecurity organization, and business leaders across legal, compliance, commercial, and operations to meet customer, regulatory, and contractual security expectations while embedding security considerations into business and technology processes.

As a member of this team, you will operate in a diverse, cross-functional environment with a high degree of autonomy, driving outcomes across organizational boundaries.

What You Will Do



* Own and mature the KES cybersecurity GRC program by establishing governance structure, policies, standards, expectations, and accountability across KES businesses.


* Represent KES cybersecurity in internal meetings, review boards, and cross-functional forums, including coordination with the Koch cybersecurity organization.


* Build and manage cybersecurity risk processes, including risk registers, findings, vulnerabilities, remediation plans, ownership, escalation, and business acceptance.


* Manage cybersecurity compliance obligations across regulatory, contractual, and customer requirements, including NIS2, China MLPS, NERC CIP, and other applicable cybersecurity standards and frameworks.


* Coordinate cybersecurity audits, assessments, evidence requests, customer reviews, and remediation tracking in partnership with Legal, Compliance, commercial teams, IT, and business leaders.


* Support customer, vendor, supplier, and subcontractor cybersecurity risk management, including questionnaires, contract reviews, security expectations, and customer-facing services.


* Coordinate the KES cybersecurity awareness program in partnership with the Koch cybersecurity organization, tailoring content, driving participation, and tracking effectiveness.


* Monitor emerging cybersecurity risks, regulatory changes, technology trends, and program metrics to improve visibility, inform risk decisions, support executive reporting, and strengthen program effectiveness.

Who You Ar...