Vice President, Governance, Risk, and Compliance (GRC)

Versant•Englewood Cliffs, NJ

11h•$220,000 - $260,000

About The Position

The Vice President, Governance, Risk, and Compliance (GRC) is a senior leader within the new Versant Cyber organization, responsible for building and expanding core capabilities and modernizing the team’s approach to risk. Reporting directly to the Chief Information Security Officer, this leader sets the strategic direction for the security evaluation program, control frameworks, and risk management processes, and ensures they operate effectively. The role leads governance, risk management and trending, compliance and policy management, corporate audit liaison functions, and cybersecurity assurance for risk evaluation and remediation. The VP establishes the GRC organization’s strategic direction in alignment with Cyber partner organizations and overall Cyber strategy; transforms existing functions and operational processes; directs cross-business engagement and prioritization of GRC services; and manages outsourced services and staff. The role evaluates technology implementation risks across brands and business units, supports appropriate business accountability for accepted risk, builds stakeholder relationships across business lines, and incorporates business partner feedback into operations and strategy. The VP also helps lead the Cyber organization’s transformation, maturity, and sustainability, while developing and supporting an effective, inclusive team.

Requirements

At least 10 years working in a leadership position across cybersecurity disciplines, including cybersecurity-focused security assurance, governance, risk, compliance, audit, and business-facing assessment, risk, and resolution lifecycle management.
Hands-on experience leading external audits and regulatory reviews involving multiple, complex business workflows.
Experience creating and maintaining governance policies, compliance programs, security training, and board reporting formats.
Experience developing internal testing and control frameworks to ensure operational efficiency and compliance.
M&A experience driving security evaluations and providing comprehensive risk evaluations.
Experience leading functions and staff defending large, complex global computing enterprises, with an understanding of the strategic and tactical requirements to transform and maintain key security functions.
Expert knowledge of risk frameworks such as COSO and ISO 31000; industry-specific regulations such as SOX, HIPAA, GDPR, and CCPA; risk assessment; and mitigation strategies.
Knowledge of the cyber threat landscape, including types of adversaries, campaigns, and motivations, and the ability to apply that knowledge to Versant’s defense.
Strong verbal and written communication and customer engagement skills, including experience briefing corporate executives and professionals.
Strong leadership skills, social and business acumen, and proven results working with leaders across organizational and business lines to solve complex problems.
Experience providing direct support and input to business executives and taking a lead role in driving the strategic direction of an organization’s mission.

Nice To Haves

Previous experience working in multiple large, complex environments, specifically within Governance, Risk, and Compliance functions.
Previous experience leading Governance, Risk, and Compliance functions in the media, entertainment, and/or advanced technology industries.
Previous experience building, maintaining, or transforming a risk management program.
Bachelor’s degree in an IT-related field and/or equivalent work experience.
Master’s degree in an IT-related field.

Responsibilities

Set the strategic direction of the GRC organization in alignment with Cyber partner organizations and the overall Cyber strategy.
Transform the maturity of existing functions, including ownership of the risk management lifecycle and operational processes.
Direct cross-business engagement, security request intake, and prioritization across GRC services.
Direct multiple outsourced services and staff to support operational efficiencies.
Evaluate security risks of technology implementations across all brands and business units, and establish appropriate accountability within business leadership for accepted risk.
Build stakeholder relationships across business lines and drive an inclusive cyber defense mission applicable to Versant and its business areas.
Maintain a feedback loop with business partners and incorporate their feedback into daily operations and strategic growth.
Influence the Versant Cyber Organization, execute its strategic and tactical mission, and lead its transformation, maturity, and sustainability.
Manage, develop, and support staff across a range of experience levels while maintaining a high bar for team effectiveness and inclusion.
Lead governance, risk management and trending, compliance and policy management, corporate audit liaison functions, and cybersecurity assurance for risk evaluation and remediation.