Oversee the complete lifecycle of GRC policies, from development and implementation to ongoing maintenance and review.
Ensure timely updates and relevance to changing regulatory, technological, and business environments.
Define, track, and report GRC program metrics.
Deliver actionable insights and progress reports to stakeholders on policy adoption, compliance status, and risk landscape.
Champion communications across the enterprise, ensuring business units are informed, engaged, and empowered to support compliance and control implementation.
Maintain and regularly update all compliance documentation to reflect current standards, procedures, and regulatory requirements.
Foster strong relationships with business units, providing guidance and support for control implementation and compliance initiatives.
Build trust and credibility as a strategic partner in the governance process.
Collaborate and contribute to Vendor Risk Management, training and awareness programs, and other cross-functional GRC projects and initiatives as needed.
Identify opportunities to streamline processes, strengthen controls, and enhance the effectiveness of GRC programs across the enterprise.
Requirements
Extensive experience in IT governance, policy management, and compliance documentation.
Proven ability to develop and manage program metrics, reporting frameworks, and enterprise communication strategies.
Strong collaborative skills, with a track record of building effective partnerships across diverse business units.
Hands-on experience supporting additional GRC functions such as vendor risk management, training programs, and large-scale cross-functional projects.
Deep understanding of industry-standard frameworks like NIST CSF and familiarity with GRC platforms (e.g., OneTrust, HyperProof) is preferred.
Excellent organizational, analytical, and communication skills. Detail-oriented with a strategic mindset.