Governance, Risk, and Compliance (GRC) Program Manager

RevSpring•Nashville, TN

12h

About The Position

The GRC Program Manager plays a critical role in safeguarding the organization’s reputation and ensuring operational excellence. The role develops and implements a comprehensive governance, risk, and compliance framework aligned with industry best practices and regulatory requirements. Responsibilities span governance, risk management, compliance, GRC framework implementation, and incident response. The position also requires communication and collaboration with internal departments and external stakeholders.

Requirements

Strong understanding of governance, risk, and compliance principles and frameworks.
Experience developing and implementing GRC programs.
Knowledge of relevant laws, regulations, and industry standards.
Strong analytical and problem-solving skills.
Excellent communication and interpersonal skills.
Ability to work independently and as part of a team.
Strong project management skills.
Bachelor’s degree in a relevant field, such as business, finance, information technology, or law.
At least 5 years of experience in GRC, risk management, or compliance roles.
Ability to read, analyze, and interpret business periodicals, professional journals, technical procedures, and governmental regulations; write reports, business correspondence, and procedure manuals; and present information and respond to questions from internal and external sources.
Ability to meet the job’s physical demands, including regularly sitting, using hands, reaching, and talking or hearing; occasionally standing, walking, and lifting or moving up to 10 pounds; and using the specified visual abilities.

Nice To Haves

Certification in GRC or a related field, such as CISA, NIST, HITRUST, or PCI; HITRUST is preferred.

Responsibilities

Develop and maintain a governance framework, including policies, procedures, and standards.
Assist with corporate governance activities, such as board meetings and shareholder communications.
Ensure effective communication and collaboration across departments and stakeholders.
Identify, assess, and prioritize organizational risks.
Develop and implement risk mitigation strategies.
Monitor and report on key risk indicators.
Conduct regular risk assessments and audits.
Ensure compliance with applicable laws, regulations, and industry standards.
Develop and implement compliance programs and policies.
Monitor and report on compliance performance.
Conduct internal audits and investigations to identify compliance gaps.
Implement and manage a GRC framework, such as NIST or HITRUST.
Use GRC tools and technologies to automate processes and improve efficiency.
Develop and maintain a GRC dashboard to track key metrics and performance indicators.
Develop and implement an incident response plan.
Participate in incidents and breaches.
Conduct post-incident reviews and document lessons learned.