Senior Governance Specialist

GAIC Great American Insurance Company•Cincinnati, OH

5d•Hybrid

About The Position

P&C IT Services provides professional services to help our business units and corporate functions use technology to create, manage, and optimize information and business processes. IT Services spans a wide range of activities, including software development, data management, Cloud services, IT security, technical support, access governance, infrastructure management, and the procurement and maintenance of equipment and software. The overall goal of IT Services is to deliver technology solutions that increase efficiency, reduce costs, and give our company a competitive advantage. Great American’s culture is built on connection, shared learning, and strong relationships. This is a hybrid role that combines in-office and remote work. Employees are expected to maintain a meaningful on-site presence to support collaboration, relationship building, and business success.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Business Administration, or a related field.
Generally, a minimum of 6 years of IT governance, risk management, compliance, or audit.
Strong understanding of IT governance frameworks and regulatory compliance requirements.
Stays current on emerging IT risks, technologies, and regulatory changes affecting the insurance industry.
Proficiency in GRC tools and platforms (e.g., ServiceNow, RSA Archer, MetricStream).
Excellent communication, stakeholder engagement, and business relationship skills.
Requires a high level of understanding of organization's business and technology operations.
Demonstrates analytical, problem-solving, and organizational skills with attention to detail.
May provide technical advice and support to lower-level positions.

Nice To Haves

Completion of or continuing progress toward a professional designation preferred, such as Certified in the Governance of Enterprise IT (CGEIT), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Risk and Information Systems Control (CRISC).

Responsibilities

Develops and maintains IT governance frameworks to support strategic alignment, value delivery, and risk management.
Collaborates with cross-functional teams to ensure IT policies and procedures are current, effective, and aligned with business needs.
Monitors compliance with internal controls, regulatory requirements, and industry standards (e.g., SOX, GDPR).
Facilitates IT audits and assessments, including evidence collection, remediation tracking, and reporting.
Supports the implementation and oversight of IT risk management practices, including risk identification, analysis, and mitigation.
Maintains documentation for IT governance processes, including policy updates, control matrices, and audit logs.
Provides guidance and training to IT and business stakeholders on governance policies and best practices.
Tracks and reports key performance indicators (KPIs) and metrics related to IT governance and compliance.
May have responsibility for performance and coaching of staff and may have a participatory role in decisions regarding talent selection, development, and performance management for direct reports.
Performs other duties as assigned.