Cybersecurity Governance Risk and Awareness Manager

Neptune Technology Group Inc. is a technology company serving water utilities across North America. Since 1892, we have continually focused on the evolving needs of water utilities – revenue optimization, operational efficiencies, and improved customer service. With our portfolio of smart water meters, data collection systems and software, we make data actionable for our customers – so they can remain focused on the business of water. For additional information, please visit the company website at www.neptunetg.com.

Cybersecurity Governance, Risk, and Awareness Manager

Position Summary

Neptune is seeking a proactive leader to mature our governance, risk management, and awareness programs across the organization. This role will lead GRC Analyst resources, own policy and procedure development, coordinate risk identification and tracking, support compliance alignment, and deliver engaging security training and awareness campaigns. The ideal candidate will be passionate about strengthening Neptune’s security culture, improving visibility into risk, and helping teams understand and meet security expectations.

Key Responsibilities

Governance

• Develop, maintain, and enforce security policies, standards, and procedures
• Manage and mentor GRC Analyst resources
• Coordinate with parent company to ensure governance alignment.

Risk Management

• Coordinate enterprise risk identification, documentation, assessment, and reporting activities
• Partner with control owners to track remediation plans, corrective actions, exceptions, and risk acceptances
• Maintain risk registers and ensure risks have clear ownership, status, due dates, and supporting evidence
• Support risk reviews with Security, Compliance, IT Operations, Product, Engineering, and business stakeholders
• Prepare leadership-ready risk summaries, trends, and updates to support decision-making

Training & Awareness

• Design and deliver engaging security awareness programs using platforms like KnowBe4
• Develop targeted training for technical and non-technical staff
• Measure and report on training effectiveness and employee engagement
• Lead and manage phishing simulation campaigns to strengthen employee awareness and response

Reporting & Metrics

• Deliver actionable metrics on policy adoption, risk posture, remediation progress, and awareness program effectiveness
• Report regularly to executive leadership and Neptune’s parent company
• Relevant Platforms (experience with several is expected)
• Risk Management: g. OneTrust or similar risk register and assessment platforms
• GRC & Policy Management: g. OneTrust
• Security Awareness: e.g KnowBe4
• Other:Familiarity with compliance frameworks, risk registers, security policies, cloud environments, and enterprise security processes

Minimum Qualifications

• Bachelor’s degree (or international equivalent)
• 5+ years in information security, including 2+ years in GRC, risk management, or security awareness roles
• Experience leading teams and managing security programs
• Strong understanding of security frameworks (NIST, ISO, SOC 2, etc.)
• Excellent communicator with experience in cross-functional coordination and executive reporting

Preferred Qualifications

CISSP, CISM, or equivalent certification

Experience with enterprise risk management, cybersecurity awareness programs, and security compliance activities

Travel Requirements

Typically requires overnight travel less than 10% of the time.

Location

Duluth, GA

#HP1