Manager, Cybersecurity GRC, Global

Vantage Data Centers powers, cools, protects and connects the technology of the world’s well-known hyperscalers, cloud providers and large enterprises. Developing and operating across North America, EMEA and Asia Pacific, Vantage has evolved data center design in innovative ways to deliver dramatic gains in reliability, efficiency and sustainability in flexible environments that can scale as quickly as the market demands.

Cybersecurity Department

The Cybersecurity Department at Vantage Data Centers is a dynamic, hands-on team responsible for the design, implementation, and maintenance of security infrastructure across our global data center footprint. We manage and configure Cybersecurity systems, partner with industry-leading vendors to stay ahead of evolving threats, and integrate cutting-edge security technologies to ensure the highest level of protection for our facilities and clients. Our team plays a critical role in designing Cybersecurity frameworks for new data center builds, ensuring compliance with industry regulations, and maintaining a balance between innovation, performance, and cost efficiency. If you are passionate about security in a fast-paced, high-growth environment, we want you on our team! 

Position Overview

This role can be based in Denver, CO.

The Manager, Cybersecurity GRC supports the governance, risk, and compliance (GRC) function to strengthen Vantage Data Centers’ cybersecurity posture within assigned regions or functional domains. This role contributes to the development, implementation, and execution of security programs, ensuring alignment with industry frameworks and regulatory requirements while supporting risk identification and mitigation activities.

Partnering cross-functionally across IT, Engineering, Legal, and other business units, the manager collaborates to support the application of policies, controls, and compliance standards. The position contributes to audit readiness, risk management, and performance reporting, assisting in delivering insights into the organization’s security and compliance posture.

This role requires a hands-on contributor who collaborates with stakeholders, supports GRC initiatives, and promotes a culture of security awareness and continuous improvement

Essential Job Functions

• Support execution of key components of the cybersecurity GRC program, ensuring implementation of policies, standards, and control frameworks within assigned regions or domains
• Contribute to the development, maintenance, and implementation of cybersecurity policies, standards, and procedures aligned to industry frameworks such as ISO 27001, SOC 2, and NIST
• Support the identification, assessment, and prioritization of cybersecurity risks; assist in tracking and execution of risk treatment plans in alignment with defined risk tolerance
• Support audit readiness and execution across internal and external audits, including coordination, evidence collection, and remediation tracking
• Participate in control validation activities to support effectiveness and consistency of cybersecurity controls
• Support development and delivery of GRC metrics, KPIs, and dashboards; assist in reporting compliance posture and risk exposure to leadership
• Assist in ensuring adherence to regulatory and customer requirements, including audit support and security-related obligations
• Collaborate with IT, OT, Engineering, Legal, and PMO teams to support integration of governance and compliance controls into operational processes
• Escalate compliance issues, audit findings, and risks to senior leadership as appropriate and support resolution activities
• Provide guidance and direction to team members and contribute to team development efforts
• Support alignment of GRC activities with broader cybersecurity priorities within assigned scope
• Contribute to improvements in GRC processes, tools, and automation to enhance efficiency and audit readiness
• Additional duties as assigned by Management

Job Requirements

• Strong communication skills (verbal and written) with the ability to communicate internally with team members as well as externally with vendors and other service providers.
• Data Center experience is strongly preferred, but not required
• Bachelor’s degree in Information Technology, Cybersecurity, or a related field (or equivalent experience). 
• Industry certifications such as CISSP, CISM, CISA, or CCSP preferred. 
• 5+ years of experience designing, implementing, and managing cybersecurity programs, ideally within a data center or critical infrastructure environment. 
• Strong understanding of security frameworks, compliance requirements, and risk management methodologies. 
• Hands-on experience with security technologies, including SIEM, firewalls, IDS/IPS, endpoint protection, and vulnerability management tools. 
• Experience in conducting security assessments, penetration testing, and incident response activities. 
• Proficiency in Microsoft Office 365 and security-related tools. 

• Strong analytical, problem-solving, and communication skills to collaborate across departments and with external partners. 

• Travel required is expected to be up to 25% but may increase over time as the business evolves

Physical Demands and Special Requirements

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is occasionally required to stand; walk; sit; use hands to handle, or feel objects; reach with hands and arms; climb stairs; balance; stoop or kneel; talk and hear. The employee must occasionally lift and/or move up to 25 pounds.

Additional Details

• Salary Range: $145,000-160,000 Base + Bonus (this range is based on Colorado market data and may vary in other locations)
• This position is eligible for company benefits including but not limited to medical, dental, and vision coverage, life and AD&D, short and long-term disability coverage, paid time off, employee assistance, participation in a 401k program that includes company match, and many other additional voluntary benefits.
• Compensation for the role will depend on a number of factors, including your qualifications, skills, competencies, and experience and may fall outside of the range shown.

#LI-RS1 #LI-Hybrid

We operate with No Ego and No Arrogance. We work to build each other up and support one another, appreciating each other’s strengths and respecting each other’s weaknesses. We find joy in our work and each other, actively seeking opportunities to inject fun into what we do. Our hard and efficient work is rewarded with an above market total compensation package. We offer a comprehensive suite of health and welfare, retirement, and paid leave benefits exceeding local expectations.

Throughout the year, the advantage of being part of the Vantage team is evident with an array of benefits, recognition, training and development, and the knowledge that your contribution adds value to the company and our community.

Don't meet all the requirements? Please still apply if you think you are the right person for the position. We are always keen to speak to people who connect with our mission and values.

Vantage Data Centers is an Equal Opportunity Employer

Vantage Data Centers does not accept unsolicited resumes from search firm agencies. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of Vantage Data Centers.

We’ll be accepting applications for at least one week from the date this role is posted. If you're interested, we encourage you to apply soon—we’re excited to find the right person and will keep the role open until we do!