Security GRC Manager

Security GRC Manager

Frontline Education is seeking a Security GRC Manager to join our growing Information Security team. Reporting to the Director of Information Security Compliance, this role is a critical execution-focused partner to the Director who supports day-to-day governance, risk, and compliance (GRC) operations, helps drive audit readiness, and supports Frontline's efforts to meet regulatory and customer expectations.

Key Responsibilities

• Compliance Program Execution
• • Support and execute a comprehensive information security compliance program aligned with relevant regulations, industry standards, and best practices.
• • Support the Director in managing key compliance certifications and audits, including SOC 2 (re)certification, coordinating with internal teams and external auditors.
• • Support the development, implementation, and maintenance of data retention, mapping, privacy, and security plans.
• • Monitor and maintain compliance with applicable laws, regulations, standards, and certifications such as SOC 2, CCPA, NIST CSF, FERPA, HIPAA and TX RAMP.
• • Help develop, monitor, measure, and report on compliance metrics covering security/privacy policies, incidents, privacy violations, and training completion.
• Risk & Third-Party Management
• • Conduct regular risk assessments to identify potential vulnerabilities and gaps in information security controls.
• • Maintain and regularly update the Cyber Risk Register, tracking identified risks, likelihood and impact ratings, mitigation status, and remediation owners, and escalating high-priority items to the Director.
• • Help design and implement controls and processes to mitigate risks identified by the Director.
• • Execute and continuously improve the third-party risk management program, including vendor security and compliance questionnaires.
• • Respond to RFP requests and client audit requests, data processing agreements (DPAs), and other external compliance inquiries.
• Cross-Functional Collaboration
• • Support the Director in partnering with Technology, Legal, HR, and Operations teams to integrate compliance requirements into business processes.
• • Support the Director in building and maintaining relationships with internal stakeholders to promote adoption of administrative/technical security controls and standards.
• • Assist in managing Roper's Annual Cybersecurity Assessments and support remediation plans in collaboration with other departments.
• Training & Culture
• • Support the development and delivery of security awareness and training programs to educate employees on policies, procedures, and best practices.
• • Help foster a culture of information security awareness and accountability throughout the organization.
• Incident Response
• • Serve as a member of the Security Incident Response Team (SIRT) to respond to and help contain, mitigate, and remediate security and privacy incidents.
• • Assist the Director and CISO in executing information security strategy, roadmaps, programs, and plans.
• People & Process
• • Support the Director in creating and maintaining policies, procedures, and relevant programs; stay current with security trends, threats, and regulations.
• • Mentor junior personnel as needed.
• Artificial Intelligence Security & Governance
• • Support the development and execution of Frontline’s AI security and governance framework, ensuring that AI systems and tools used across the organization are securely configured, assessed, documented, and managed in alignment with security and compliance requirements.
• • Conduct AI security risk assessments for internal and vendor-supplied AI tools, evaluating threats such as prompt injection, data poisoning, model extraction, and sensitive-data leakage, alongside training data practices and potential for regulatory non-compliance (FERPA, HIPAA, CCPA).
• • Review and assess vendor AI terms, data processing agreements, and acceptable use policies, with particular focus on model security, data handling, and access controls, to ensure alignment with Frontline’s security posture and customer obligations.
• • Monitor the evolving AI threat and regulatory landscape (e.g., OWASP Top 10 for LLMs, MITRE ATLAS, NIST AI RMF, EU AI Act) and assess impact on Frontline’s security and compliance posture, escalating material gaps to the Director.
• • Support the development of internal AI use policies and employee guidance, defining technical and administrative guardrails — including access controls, data-handling rules, and usage monitoring — for the secure use of generative AI and other AI-powered tools.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.

• CISA (Certified Information Security Auditor), CISSP (Certified Information System Security Professional) or other relevant certification strongly preferred.

• 7 to 10 years of experience in compliance and risk management, preferably in information security.

• Hands-on experience executing SOC 2 (re)certification processes required.

• Strong understanding of information security regulations and standards: GDPR, CCPA, HIPAA, NIST Cybersecurity Framework, FERPA, etc.

• Experience conducting risk assessments and implementing controls.

• Proven ability to manage compliance audits and coordinate with external auditors.

• Strong communication and interpersonal skills; able to work effectively across teams.

• Ability to manage multiple projects, meet deadlines, and deliver high-quality results in a fast-paced SaaS environment.

• Strong analytical and problem-solving abilities with attention to detail.

• About Frontline Education

• Frontline Education is a pioneer of school administration software purpose-built for K–12 districts. We provide innovative, connected solutions for student and special programs, business operations, and human capital management with powerful data and analytics to empower educators and administrators. We earn the trust of K–12 leaders across the U.S. by serving as a consistently high-performing, forthright partner of school districts through every dimension of the company.

• We’re a group of unique and talented individuals who love what we do. We believe in servant leadership, collaboration, continuous improvement, and balancing great work with a healthy life outside of it.

• Frontline embraces diversity, equity, and inclusivity and is an equal opportunity employer.

• Our Mission, Our People, Our Purpose

• At Frontline Education, we're reimagining what's possible by becoming an AI-first organization, transforming how we think, work, and serve the educators who shape our schools every day. By using AI in thoughtful, practical ways, we're creating tools that help educators save time, gain insights, and focus more on what matters most — their students.

• As part of our team, you'll be expected and empowered to build and apply AI skillsets that grow with you, because at Frontline Education, technology amplifies what matters most: the human drive to learn, improve, and make a difference.

• How We Support Growth, Balance, and Well-Being

• Personalised Time Off: Take time when it's needed most — whether that's a family vacation, a reset day, or simply time to rest and refocus.

• Paid Sick Time: Separate, dedicated sick leave to care for yourself or loved ones.

• Volunteer Time Off: Paid time to give back and support causes that matter to you.

• Ten Paid Holidays: Enjoy meaningful moments and traditions throughout the year.

• Our Philosophy: We believe time away from work helps you bring your best self to it.

• Continuous Learning and Growth

• World-Class Learning Access: Explore thousands of on-demand courses through platforms like LinkedIn Learning.

• Leadership & Technical Skill Building: Develop new capabilities and chart your own professional path.

• AI Empowerment: Use OpenAI tools to build fluency with emerging technology and harness AI as a creative partner for innovation and problem-solving.

• Tuition Reimbursement: Invest in formal education to advance your skills and career.

• Ongoing Learning Culture: Participate in company-led webinars on AI, inclusion, and industry trends — designed to inspire curiosity and continuous improvement.

• Health, Happiness, and Purpose

• Wellness Initiatives: Company-sponsored programs that support physical, mental, and emotional well-being.

• Employee Assistance Program (EAP): Confidential support for you and your family's needs.

• Comprehensive

Benefits

• Health and financial benefits that support your happiness and future.
• A Culture That Cares: At Frontline Education, we want every team member to learn, grow, and thrive — personally, professionally, and purposefully.

Compensation