Vice President, Governance, Risk, and Compliance (GRC)

Versant•Orlando, NJ

About The Position

The Vice President, Governance, Risk, and Compliance (GRC) is a senior leader within the new Versant Cyber organization. Reporting directly to the Chief Information Security Officer, this role uses technical experience and business acumen to build and expand core capabilities and modernize the organization’s approach to risk. The VP sets the strategic direction for the security evaluation program, control frameworks, and risk management processes, and ensures they operate effectively. The role leads the GRC organization’s governance program, risk management and trending lifecycle, compliance and policy management, corporate audit liaison functions, and cybersecurity assurance for risk evaluation and remediation. It also works across Versant’s brands and business units, engages business stakeholders, directs outsourced services and staff, and supports the development and effectiveness of the team.

Requirements

At least 10 years working in a leadership position across cybersecurity disciplines, including cybersecurity assurance, governance, risk, compliance, audit, and business-facing assessment, risk, and resolution lifecycle management.
Hands-on experience leading external audits and regulatory reviews involving multiple, complex business workflows.
Experience creating and maintaining governance policies, compliance programs, security training, and board reporting formats.
Experience developing internal testing and control frameworks to support operational efficiency and compliance.
Mergers and acquisitions experience driving security evaluations and providing comprehensive risk evaluations.
Experience leading functions and staff responsible for defending large, complex global computing enterprises, and understanding strategic and tactical requirements to transform and maintain key security functions.
Expert knowledge of risk frameworks such as COSO and ISO 31000; industry-specific regulations such as SOX, HIPAA, GDPR, and CCPA; risk assessment; and mitigation strategies.
Knowledge of the cyber threat landscape, including adversary types, campaigns, and motivations, and ability to apply that knowledge to Versant’s defense.
Strong verbal and written communication and customer engagement skills, including experience briefing corporate executives and professionals.
Strong leadership skills, social and business acumen, and proven results working with leaders across organizational and business lines to solve complex problems.
Experience providing direct support and input to business executives and taking a lead role in setting the strategic direction of an organization’s mission.

Nice To Haves

Previous experience working in multiple large, complex environments, specifically within Governance, Risk, and Compliance functions.
Previous experience leading GRC functions in the media, entertainment, and/or advanced technology industries.
Previous experience building, maintaining, or transforming a risk management program.
Bachelor’s degree in an IT-related field and/or equivalent work experience.
Master’s degree in an IT-related field.

Responsibilities

Set the strategic direction of the GRC organization in alignment with key Cyber partner organizations and the overall Cyber strategy.
Transform the maturity of existing functions, including ownership of the risk management lifecycle and operational processes.
Direct cross-business engagement, security request intake and interactions, and prioritization across GRC services.
Direct multiple outsourced services and staff to support operational efficiency.
Evaluate security risks associated with technology implementations across brands and business units, and establish appropriate accountability among business leadership for accepted risks.
Build stakeholder relationships across business lines and advance an inclusive cyber defense mission applicable to Versant and its business areas.
Maintain a feedback loop with business partners and incorporate their feedback into daily operations and strategic growth.
Influence the Versant Cyber Organization, execute its strategic and tactical mission, and lead its transformation, maturity, and sustainability.
Manage, develop, and support staff at a range of experience levels while maintaining high standards for effectiveness and inclusion.
Lead governance, risk management and trending, compliance and policy management, corporate audit liaison functions, and cybersecurity assurance for risk evaluation and remediation.