Job Description
POSITION OVERVIEW:
Leads governance, risk, and compliance (GRC) activities to ensure the organization meets regulatory, audit, and internal security requirements. Manages a team of analysts and advisors, oversees compliance assessments, and partners with business and technical stakeholders to strengthen the enterprise control environment
ESSENTIAL FUNCTIONS:
Lead and manage the GRC team, including hiring, mentoring, and performance development
Oversee enterprise compliance and risk management programs, ensuring alignment with regulatory and internal standards
Direct audit and certification processes, providing evidence, addressing findings, and managing remediation
Develop and maintain information security policies, standards, and governance frameworks
Partner with executives, business leaders, and technical teams to advise on compliance requirements and risks
Promote awareness and adoption of governance and compliance practices across the enterprise
Leadership and team development skills to manage and grow a high-performing GRC function
Strategic thinking to align compliance and risk management with business priorities
Comply with all applicable laws/regulations, as well as company policies/procedures.
Perform other duties as assigned.
QUALIFICATIONS:
Bachelor’s degree in information security, information systems, business administration, and / or related field or equivalent formal training
Five (5) years of experience in governance, risk, compliance, or related information security functions, with at least 2 years in a leadership role
Strong knowledge of regulatory and industry frameworks including SOX, NIST, ISO 27001, and COBIT
Proven experience managing audits, enterprise risk assessments, and remediation programs
Ability to develop policies, standards, and control frameworks to support compliance objectives
Certifications such as CISA, CRISC, CISM, or ISO 27001 lead implementer/auditor preferred
Influencing and communication skills to engage executives and diverse stakeholders
Analytical and organizational skills to oversee audits, risk assessments, and compliance programs
JOB CONDITIONS:
Some travel required