Senior Manager, GRC

Posted 3 Days Ago
Be an Early Applicant
Hiring Remotely in Louisville, KY, USA
In-Office or Remote
Senior level
Food
The Role
Leads the enterprise cybersecurity governance, risk, and compliance program across business, IT, cloud, and third-party environments. Establishes risk, control, exception, audit, regulatory, and third-party risk processes; produces executive and board reporting; governs policies, awareness training, vulnerability management, logging, detection, and control assurance. Partners with Security, IT, Legal, Compliance, and Procurement while managing resources, budgets, and continuous improvement initiatives.
Summary Generated by Built In

What’s Unique About You Is What Makes Us Better! Diversity is our strength and competitive advantage. Bring your flavor to the Papa John's team today!

Job Summary

This role is responsible for enabling risk-informed decision making, clear accountability, and consistent control governance across business, IT, cloud, and third-party environments. The ideal candidate will bring strong judgment, the ability to operate across organizational boundaries, and experience building and scaling GRC capabilities in complex environments.


Duties and Responsibilities (other duties as assigned)

  • Establishing and operating the enterprise cybersecurity risk management program, including risk identification, prioritization, and tracking       
  • Defining and enforcing risk acceptance, escalation, and accountability frameworks       
  • Developing executive and board-level risk reporting aligned to business impact
  • Defining and governing cybersecurity policies, standards, and control frameworks aligned to industry standard frameworks·        
  • Ensuring consistent control implementation and enforcement across IT, cloud, and business environments       
  • Leading exception management processes to ensure risk is explicitly understood and accepted at the right levels     
  • Establishing and leading the third-party risk management program, including vendor tiering and assessments      
  • Coordinating regulatory and audit engagements (internal and external)       
  • Partnering across Security, IT, Legal, Compliance, and Procurement (among others as relevant) to align risk and control expectations·         Establishing and governing the cybersecurity awareness and training program, ensuring it is aligned to enterprise risk and tailored user roles
  • Overseeing control validation, testing, and assurance activities·         Ensuring governance of vulnerability management, logging, and detection capabilities·        
  • Driving continuous improvement through risk insights, incident learnings, and control effectiveness reviews
  • Managing and optimizing budget and resources to support governance, risk, and compliance capabilities

Education, Experience & Certifications

  • 6–10+ years of experience in cybersecurity risk management
  • Proven leadership experience in building, scaling, and maturing teams and operating models
  • Strong understanding of cybersecurity control frameworks       
  • Demonstrated ability to translate technical risk into business impact and action      
  • Experience building or maturing GRC programs in complex organizations       
  • Strong judgment in prioritization, tradeoff decisions, and stakeholder alignment
  • Experience supporting or leading SOX ITGC and/or application control environments in a complex organization      
  • Experience establishing or evolving security awareness and behavior change programs       
  • Excellent communication skills and ability to influence across technical and business stakeholders        
  • Experience working with third-party risk, audit, and compliance functions

Functional Skills

  • Proven leadership experience in building, scaling, and maturing teams and operating models
  • Strong understanding of cybersecurity control frameworks
  • Demonstrated ability to translate technical risk into business impact and action
  • Strong judgment in prioritization, tradeoff decisions, and stakeholder alignment
  • Experience supporting or leading SOX ITGC and/or application control environments in a complex organization
  • Experience establishing or evolving security awareness and behavior change programs
  • Excellent communication skills and ability to influence across technical and business stakeholders
  • Experience working with third-party risk, audit, and compliance functions

Our Values

  • EVERYONE BELONGS – We believe connectedness and belonging are the essential ingredients to our success.
  • DO THE RIGHT THING –We are relentlessly focused on quality and integrity and make the right choices, even when it's difficult.
  • PEOPLE FIRST – To craft positive experiences for our customers, we take care of each other first.
  • INNOVATE TO WIN – We champion and challenge for a better way in all we do.
  • HAVE FUN – We find joy, create meaningful impact and celebrate the journey together

Our Core Competencies

  • EVERYONE BELONGS – We believe connectedness and belonging are the essential ingredients to our success.
  • DO THE RIGHT THING –We are relentlessly focused on quality and integrity and make the right choices, even when it's difficult.
  • PEOPLE FIRST – To craft positive experiences for our customers, we take care of each other first.
  • INNOVATE TO WIN – We champion and challenge for a better way in all we do.
  • HAVE FUN – We find joy, create meaningful impact and celebrate the journey together

Papa Johns is an equal opportunity employer.


Papa Johns is a federal contractor that participates in the E-Verify program to confirm employment eligibility for each new team member. We also comply with all Right to Work requirements. Official E-Verify and Right to Work notices are available for applicants to review in both English and Spanish.


Everybody loves pizza, which means they also love the people who are behind the scenes working to deliver it. This is complex and challenging work – but let’s face it – it’s also pizza! If you want a fulfilling career with a company that’s always moving forward, we’re the right place.

Papa John's is a Federal Contract employer who participates in E-Verify to confirm employment eligibility for each new team member. For more information please view the following PDFs: E-Verify Poster (English) - Right to Work Poster (English) - E-Verify Poster (Spanish) - Right to Work Poster (Spanish) Papa John's is an Affirmative Action and Equal Opportunity Employer. For more information please click on the following PDF. See terms & conditions for site use.

Skills Required

  • 6-10+ years of experience in cybersecurity risk management
  • Leadership experience building, scaling, and maturing teams and operating models
  • Strong understanding of cybersecurity control frameworks
  • Ability to translate technical risk into business impact and action
  • Experience building or maturing GRC programs in complex organizations
  • Strong judgment in prioritization, tradeoff decisions, and stakeholder alignment
  • Experience supporting or leading SOX ITGC and/or application control environments in a complex organization
  • Experience establishing or evolving security awareness and behavior change programs
  • Excellent communication skills and ability to influence technical and business stakeholders
  • Experience working with third-party risk, audit, and compliance functions

Papa John's Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Papa John's and has not been reviewed or approved by Papa John's.

  • Healthcare Strength — Healthcare coverage is described as available for eligible roles, including medical and dental options, alongside life and disability coverage in some packages.
  • Retirement Support — Retirement support is described as available for eligible employees through a 401(k) plan, sometimes referenced with a company match depending on role and employer.
  • Career-Linked Recognition & Rewards — Career-linked rewards are described through education support such as the Dough & Degrees program and occasional performance-related bonuses or recognition-style perks in certain organizations.

Papa John's Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Louisville, KY
13,567 Employees
Year Founded: 1984

What We Do

Papa John's Pizza is an American restaurant company that runs the third largest take-out and pizza delivery restaurant. Papa John's seeks people who have an entrepreneurial spirit and share our philosophy for success. Hands-on training, a clean and safe work environment, quality business practices, advancement opportunities and meaningful work combine to produce not only the best pizza, but also the best team members! Better Opportunities. Better People! At Papa John's we call ourselves team members instead of employees because we believe it is only through a strong team we can produce the best experience for our customers. Whether at our corporate campus, distribution centers, our restaurants, or located internationally; Papa John's has a variety of positions for talented and passionate people. Papa John's is an equal opportunity employer and provides excellent career opportunities for our entire team. Our company philosophies of promote from within and rewards based on performance are important elements of our company culture.

Similar Jobs

Keeper Security, Inc. Logo Keeper Security, Inc.

Program Manager

Mobile • Security • Software • Cybersecurity
Remote or Hybrid
US
350 Employees
Remote
United States
482 Employees
125K-150K Annually
Remote or Hybrid
United States
916 Employees

CFGI Logo CFGI

GRC and AI Governance - Senior Manager

Consulting • Financial Services
Remote or Hybrid
United States
916 Employees

Similar Companies Hiring

Munchkin, Inc. Thumbnail
Consumer Web • eCommerce • Food • Kids + Family • Design • Manufacturing
Milton, Ontario
325 Employees
Hilton Thumbnail
Events • Food • Travel • Hospitality • Hotels & Resorts
McLean, VA
500000 Employees
Amalgamated Sugar Thumbnail
Food • Greentech • Agriculture • Industrial • Manufacturing
Boise, Idaho
768 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account