Sr Manager - IT Governance, Risk and Compliance
Core
Lead and manage the IT Governance, Risk, and Compliance (GRC) team to drive the development, maintenance, and execution of the GRC framework, ensuring compliance with global regulations and maturing the organization's cybersecurity posture.
Role type
Senior Manager, IT GRC
Builds
Cybersecurity GRC framework, policies, standards, and procedures
Domain
IT Governance, Risk, and Compliance (Aerospace/Defense, Healthcare/Life Sciences)
Required skills
IT GRC framework development, risk assessment, IT control design review, audit coordination, third-party risk management, KPI/KRI reporting, succession planning, regulatory knowledge (ISO 27001, NIST CSF, GDPR, CMMC, SOX, HIPAA)
Preferred skills
Global IT GRC function building, global third-party risk function building, GRC software platform administration (Vanta, ServiceNow GRC)
Technologies
Vanta, ServiceNow GRC
Responsibilities
Develop and maintain Cybersecurity GRC framework, policies, standards, and procedures; Oversee risk mitigation and the IT risk register; Coordinate internal and external cybersecurity audits; Build, coordinate and oversee Third-Party risk management; Lead the execution of the multi-year GRC Program roadmap; Evaluate potential and drive succession planning for the team.
Seniority
Senior Manager, strategic leadership & team management