Cybersecurity Program & GRC Manager

Based in Azerables, France, this role owns the governance structure, program documentation, and reporting for the cybersecurity and compliance program. Lead PCI DSS and SOX compliance efforts in collaboration with IT, Finance, and external auditors, organizing evidence for audits. Maintain the security risk register and map risks to CIS Controls, PCI DSS, and SOX, tracking remediation actions. Coordinate policy reviews, control ownership, testing, and remediation; translate audit findings into actionable improvements. Enable program execution through tooling, vulnerability management, MFA, logging, awareness training, and coordination with service providers. Provide dashboards and metrics to leadership, ensuring security initiatives align with risk appetite and regulatory requirements.