Compliance

• Lead the design, development, and rollout of an **enterprise-wide GRC solution**, aligning program objectives with policy, audit, and risk requirements.
• Develop and implement integrated workflows for:
• - **Policy Management:** Oversee document lifecycle, approval processes, and retention schedules.
• - **Audit & Compliance:** Establish control assignment models, streamline evidence collection, automate testing, and manage exception handling.
• - **Risk Management:** Build risk-to-control mappings, establish prioritization frameworks, and track Plans of Action and Milestones (POAMs).
• Develop and refine vendor risk scoring models to enhance third-party oversight and accountability.
• Create and standardize templates, forms, and dashboards for system inventories, POAMs, and compliance documentation.
• Lead the development and maintenance of a Security Minimum Baseline, ensuring regulatory alignment and cybersecurity readiness.
• Review and cross-map security policies against frameworks such as HIPAA, CJIS, IRS Pub 1075, and PCI-DSS.
• Collaborate with IT, audit, and information security teams to integrate GRC workflows with existing enterprise platforms (e.g., ServiceNow, Archer, or similar).
• Analyze audit findings, identify control gaps, and drive corrective actions that strengthen compliance posture and operational resilience.

GRC Manager

Senior Regulatory Risk Specialist

Director, Global Regulatory Leader

Director, Global Regulatory Leader

Senior Manager, Quality – Regulatory Affairs

Senior Compliance Lead