Cybersecurity Governance, Risk, and Awareness Manager
Position Summary
Neptune is seeking a proactive leader to mature our governance, risk management, and awareness programs across the organization. This role will lead GRC Analyst resources, own policy and procedure development, coordinate risk identification and tracking, support compliance alignment, and deliver engaging security training and awareness campaigns. The ideal candidate will be passionate about strengthening Neptune's security culture, improving visibility into risk, and helping teams understand and meet security expectations.
Key Responsibilities
Governance
Develop, maintain, and enforce security policies, standards, and procedures
Manage and mentor GRC Analyst resources
Coordinate with parent company to ensure governance alignment.
Risk Management
Coordinate enterprise risk identification, documentation, assessment, and reporting activities
Partner with control owners to track remediation plans, corrective actions, exceptions, and risk acceptances
Maintain risk registers and ensure risks have clear ownership, status, due dates, and supporting evidence
Support risk reviews with Security, Compliance, IT Operations, Product, Engineering, and business stakeholders
Prepare leadership-ready risk summaries, trends, and updates to support decision-making
Training & Awareness
Design and deliver engaging security awareness programs using platforms like KnowBe4
Develop targeted training for technical and non-technical staff
Measure and report on training effectiveness and employee engagement
Lead and manage phishing simulation campaigns to strengthen employee awareness and response
Reporting & Metrics
Deliver actionable metrics on policy adoption, risk posture, remediation progress, and awareness program effectiveness
Report regularly to executive leadership and Neptune's parent company
Relevant Platforms (experience with several is expected)
Risk Management: g. OneTrust or similar risk register and assessment platforms
GRC & Policy Management: g. OneTrust
Security Awareness: e.g KnowBe4
Other:Familiarity with compliance frameworks, risk registers, security policies, cloud environments, and enterprise security processes
Minimum Qualifications
Bachelor's degree (or international equivalent)
5+ years in information security, including 2+ years in GRC, risk management, or security awareness roles
Experience leading teams and managing security programs
Strong understanding of security frameworks (NIST, ISO, SOC 2, etc.)
Excellent communicator with experience in cross-functional coordination and executive reporting
Preferred Qualifications
CISSP, CISM, or equivalent certification
Experience with enterprise risk management, cybersecurity awareness programs, and security compliance activities
Travel Requirements
Typically requires overnight travel less than 10% of the time.
Location
Duluth, GA
#HP1
About Roper Technologies
Roper Technologies is a diversified technology company that designs, develops, and manufactures engineered products and solutions for global niche markets. The company operates through four segments: Application Software; Network Software & Systems; Measurement & Analytical Solutions; and Process Technologies. Roper Technologies serves customers in healthcare, transportation, food, energy, water, education, and other markets. The company was founded in 1981 and is headquartered in Sarasota, Florida.
