Overview In this role you will lead and transform the enterprise IT GRC function to deliver a modern, data-driven program focused on governance, risk, compliance, and regulatory readiness. You will partner with Cybersecurity, Technology, Audit, Legal, Privacy, and business leaders to manage technology and cybersecurity risk at scale, leveraging automation and AI to enable business growth. You will report to executive leadership and influence board discussions, driving accountability and risk-informed decision making.
Compensation / Benefits- short-term incentive compensation
- long-term incentive compensation
- equal opportunity employer
- competitive compensation range
- transparent salary discussions
Responsibilities- Develop and execute a multi-year IT GRC strategy aligned with enterprise goals and cybersecurity priorities
- Transform compliance and risk management into a data-driven, automated operating model
- Build and retain a high-performing GRC organization across governance, risk, compliance, and regulatory disciplines
- Oversee IT governance frameworks, policies, controls, and risk management processes
- Report on technology and cybersecurity risks to executives and the board, with analytics and metrics
- Lead compliance efforts for technology and cybersecurity regulations and standards; manage regulatory examinations and audits
- Sponsor technology and cybersecurity audits, examinations, and regulatory engagements
- Drive remediation of audit findings through risk-based prioritization and measurable outcomes
- Provide strategic oversight of technology and cybersecurity governance programs; monitor threats and control effectiveness
- Champion modernization through automation, continuous assurance, and AI governance for emerging technologies
- Deliver concise, actionable briefings to senior leadership, boards, auditors, and regulators
- Foster cross-functional collaboration to ensure integrated risk management across the enterprise
- Promote a culture of innovation while maintaining compliance and risk controls
Key requirements- 15+ years of progressive leadership experience across IT governance, risk management, compliance, audit, cybersecurity, or technology management
- Experience leading large-scale enterprise programs in highly regulated environments
- Strong understanding of IT architectures, cloud, IAM, data protection, and technology operations
- Extensive experience managing regulatory compliance programs and interactions with auditors
- Proven experience presenting to executive teams, boards, regulators, and auditors
- Track record of developing enterprise-wide governance, risk, compliance, or cybersecurity programs
- Exceptional executive communication, influencing, and relationship management skills
- executive communication
- influencing and relationship management
- cross-functional collaboration
- IT GRC
- cybersecurity governance
- risk management
