Governance, Risk, and Compliance Lead

At GFiber, we believe that great internet has the power to drive innovation, strengthen communities, enable the impossible, and do all the everyday things that make all of our world go round. And the job of creating better internet is never done - so we’re growing! Our team is committed to building a place where people who want to make a difference can grow their careers and find their spot to belong.

GFiber is an Alphabet company that brings Google Fiber and Google Fiber Webpass internet services to homes and businesses across the United States. Our teams are expanding as we connect more cities and people to exceptional internet.

The application window will be open until at least October 3rd, 2025. This opportunity will remain online based on business needs which may be before or after the specified date.

The Cybersecurity team at GFiber leads the protection of our networks, systems, and data. The Governance, Risk, and Compliance (GRC) function is a critical part of our team, responsible for establishing the frameworks that guide our security practices. This GRC Lead will be essential in shaping our security strategy, managing risk, and ensuring we meet our compliance obligations as we grow.

Role Description

As the GRC Lead, you will guide and grow our governance, risk, and compliance program. Your role is to ensure GFiber’s security practices are strong, clear, and align with key industry standards. You will partner with teams across the company, from Engineering to Legal, to build security into our processes and help us make informed decisions about risk. Your work will directly contribute to building and maintaining trust with our customers.

In This Role, You'Ll:

• Lead and develop the GRC team, guiding their work on security projects and compliance activities.
• Manage our security risk program by finding, evaluating, and tracking risks across the company.
• Oversee our security compliance programs, ensuring we follow standards like ISO 27001 and the NIST Cybersecurity Framework (CSF).
• Work with teams across GFiber to help them build security into their daily operations.
• Clearly communicate our security posture, risks, and compliance status to leadership.

At a minimum we'd like you to have:

• 7 years of experience in governance, risk, and compliance (GRC) or information security.
• 3 years of experience leading a GRC program or team, including managing direct reports.
• Experience with security frameworks such as ISO 27001 and the NIST Cybersecurity Framework (CSF).

It'S Preferred If You Have:

• Experience in the telecommunications industry.
• Familiarity with regulatory and compliance requirements in the telecom sector.
• Experience scaling a GRC program in a growing organization.
• Industry certifications such as CISSP, CISM, or CRISC.

The US base salary range for this full-time position is between $139,200 - $203,300 + bonus + cash award + benefits. As pay varies by location, your recruiter will share more about the specific salary range for your targeted location during the hiring process.

GFiber is committed to equal opportunity employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, citizenship, marital status, disability or Veteran status. Disclosure is voluntary, and this information will be kept confidential in compliance with Google's Candidate Privacy Policy. For more information please refer to our Equal Employment Opportunity Policy and the EEOC's "Know your rights: workplace discrimination is illegal" (PDF). 

It's important to us to create an accessible, inclusive workplace for everyone. If you have a need that requires accommodation, please let us know by completing our accommodations for applicants form. Our candidate accommodations team will then connect with you to confidentially discuss your options.