Governance, Risk, and Compliance (GRC) Program Manager
About The Position
As a GRC Program Manager, you will help safeguard the organization’s reputation and ensure operational excellence. You will develop and implement a comprehensive governance, risk, and compliance framework aligned with industry best practices and regulatory requirements. The role includes developing governance policies and procedures, identifying and mitigating organizational risks, managing compliance programs and audits, implementing a GRC framework and related tools, and supporting incident response and post-incident reviews. The position requires strong knowledge of GRC principles and frameworks, relevant laws and standards, and experience developing and implementing GRC programs. A bachelor’s degree in a relevant field and at least five years of experience in GRC, risk management, or compliance are required. A certification in GRC or a related field is listed, with HITRUST preferred. The position’s physical requirements include regular sitting and occasional standing, walking, and lifting or moving up to 10 pounds; reasonable accommodations may be made.
Requirements
- Strong understanding of governance, risk, and compliance principles and frameworks.
- Experience developing and implementing GRC programs.
- Knowledge of relevant laws, regulations, and industry standards.
- Strong analytical and problem-solving skills.
- Excellent communication and interpersonal skills.
- Ability to work independently and as part of a team.
- Strong project management skills.
- Bachelor’s degree in a relevant field, such as business, finance, information technology, or law.
- At least five years of experience in GRC, risk management, or compliance roles.
- Ability to read, analyze, and interpret business periodicals, professional journals, technical procedures, and governmental regulations; write reports, business correspondence, and procedure manuals; and present information and respond to questions from internal and external sources.
- Physical ability to regularly sit; use hands to finger, handle, or feel; reach with hands and arms; and talk or hear. Occasional standing, walking, and lifting or moving up to 10 pounds are required. Specific vision abilities include close, distance, color, and peripheral vision, depth perception, and ability to adjust focus.
Nice To Haves
- Certification in GRC or a related field, such as CISA, NIST, HITRUST, or PCI; HITRUST is preferred.
Responsibilities
- Develop and maintain a governance framework, including policies, procedures, and standards.
- Assist with corporate governance activities, including board meetings and shareholder communications.
- Ensure effective communication and collaboration among departments and stakeholders.
- Identify, assess, and prioritize organizational risks.
- Develop and implement risk mitigation strategies.
- Monitor and report on key risk indicators.
- Conduct regular risk assessments and audits.
- Ensure compliance with relevant laws, regulations, and industry standards.
- Develop and implement compliance programs and policies.
- Monitor and report on compliance performance.
- Conduct internal audits and investigations to identify compliance gaps.
- Implement and manage a GRC framework, such as NIST or HITRUST.
- Use GRC tools and technologies to automate processes and improve efficiency.
- Develop and maintain a GRC dashboard to track key metrics and performance indicators.
- Develop and implement an incident response plan.
- Participate in incidents and breaches.
- Conduct post-incident reviews and document lessons learned.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
