Senior Manager, GRC Strategy & AI

TransUnion•Chicago, IL

6d•Hybrid

About The Position

The Global Cyber Governance, Risk & Compliance (GRC) team oversees cybersecurity governance, risk management, compliance, controls, and regulatory readiness across TransUnion. The team partners with Information Security, Technology, Audit, Compliance, Legal, Privacy, and Enterprise Risk Management to strengthen cyber resilience and support trusted business operations. This position reports to the SVP, Global Cyber Governance, Risk & Compliance. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Requirements

At least 10 years of experience in cybersecurity, information security, risk management, compliance, governance, controls, technology risk, audit, or a related field, including experience operating in a complex enterprise environment.
Experience supporting senior executives through strategic planning, organizational governance, executive communications, operational management, and data-driven decision-making.
Demonstrated experience leading Cyber GRC, cyber risk, compliance, controls assurance, technology risk, or governance programs and translating complex requirements into measurable business outcomes.
Strong knowledge of cybersecurity governance, control effectiveness, regulatory compliance, and risk management methodologies, including frameworks such as the NIST Cybersecurity Framework, NIST Special Publication 800-53, ISO/IEC 27001, COBIT, CIS Controls, FFIEC, PCI DSS, and SOX.
Bachelor’s degree in cybersecurity, business administration, information technology, risk management, or a related discipline; a master’s degree is preferred.
Advanced proficiency with Microsoft 365 and Power BI, including the development of executive presentations, dashboards, scorecards, and performance reports.
Experience using reporting and analytics platforms to analyze complex datasets and translate results into actionable recommendations for executive audiences.
Experience developing and managing key performance indicators, key risk indicators, risk-reduction measures, compliance reports, and control-effectiveness metrics.
Experience implementing artificial intelligence-enabled solutions and workflow automation tools to improve manual governance, assessment, reporting, and compliance processes.
Ability to design and maintain governance reporting frameworks, organizational operating models, and performance-measurement programs.

Nice To Haves

A Certified Information Systems Security Professional, Certified Information Systems Auditor, Certified in Risk and Information Systems Control, Certified in the Governance of Enterprise IT, or comparable professional certification.
Experience supporting a CISO-level organization and developing executive operating models, governance processes, and organizational performance frameworks.
Experience leading large-scale Cyber GRC transformation, modernization, process-improvement, or automation initiatives.
Experience working in a highly regulated industry, such as financial services, credit reporting, banking, insurance, or healthcare.
Lean Six Sigma certification or experience applying structured process-improvement practices.

Responsibilities

Serve as a strategic advisor and operational partner to the SVP, Global Cyber Governance, Risk & Compliance, translating organizational priorities into executable plans and measurable outcomes.
Develop and maintain multi-year strategies, annual operating plans, organizational roadmaps, performance objectives, and a centralized operating rhythm for the Global Cyber GRC organization.
Lead the development and communication of key performance indicators, key risk indicators, risk-reduction measures, executive dashboards, and governance reporting for the CISO, executive leadership, and business stakeholders.
Create executive presentations, board-ready materials, and communication artifacts that translate complex cybersecurity, risk, compliance, and controls information into clear business insights.
Lead a small team responsible for Cyber GRC reporting, performance metrics, data analysis, governance reporting, and executive communications.
Modernize and automate Cyber GRC processes through artificial intelligence, workflow automation, analytics, and emerging technologies to improve efficiency, consistency, and scalability.
Partner with Information Security Officers, Technology, Audit, Compliance, Legal, Privacy, Technology Risk, Enterprise Risk Management, Finance, and business leaders to improve risk, control, and compliance reporting.
Oversee budget planning, workforce planning, resource allocation, and financial tracking activities for the Global Cyber GRC organization.
Monitor strategic initiatives and transformation efforts, providing leadership with visibility into progress, dependencies, risks, issues, remediation priorities, and business outcomes.

Benefits

Day-one eligibility for medical, dental, and vision coverage, plus supplemental plan options.
Spousal, domestic partner, and other eligible dependent coverage is available on select plans.
Tax‑advantaged HSA and FSA accounts.
Company‑paid basic life and AD&D.
Optional voluntary life and AD&D for you and your family.
Short‑ and long‑term disability.
Optional legal plan, pet insurance, and travel accident coverage.
Adoption assistance and fertility planning coverage.
Caregiver support.
Dependent Care FSA for possibility of an employer match.
Complimentary Care@Work membership.
Up to 12 weeks of paid parental leave with eligibility for a thoughtful, gradual return.
401(k) with employer match.
Employee Stock Purchase Plan (ESPP).
Financial wellness resources.
Career coaching.
Optional long‑term care insurance.
Tuition reimbursement.
Flexible time off for exempt employees or paid time off for nonexempt employees.
Up to 12 paid holidays per year.
Commuter benefits.
Employee discounts.
Charitable gift matching.
Paid volunteer time off.
Corporate volunteer events.
24/7 support including professional therapy, coaching, and emotional well‑being programs.
Guided meditation and resources that support physical, mental, social, and financial wellness.