The role uses risk, control, incident, phishing, training, and workforce data to identify behavioral and governance risk, influence business leaders, and drive measurable improvements rather than functioning as an administrative compliance or training-coordination role. Position Qualifications: 5+ years of cybersecurity GRC, risk, compliance, security awareness/human risk, change management, or related experience, with demonstrated ownership of both risk/control work and measurable stakeholder or behavior-change outcomes.