Vice President, Governance, Risk, and Compliance (GRC)

Versant•Englewood Cliffs, NJ

About The Position

The Vice President, Governance, Risk, and Compliance (GRC) is a senior leader in the new Versant Cyber organization. The role applies technical experience and business acumen to build and expand core capabilities and modernize the organization’s approach to risk. Reporting directly to the Chief Information Security Officer, the VP sets the strategic direction for the security evaluation program, control frameworks, and risk management processes, and ensures they operate effectively. The role leads governance, risk management and trending, compliance and policy management, corporate audit liaison functions, and cybersecurity assurance for risk evaluation and remediation. It also directs GRC services across business units, manages outsourced services and staff, and supports the development and effectiveness of the team. External candidates may be required to attend an in-person interview at a VERSANT Media location before a hiring decision. VERSANT Media provides equal employment opportunities and offers reasonable accommodations for qualified individuals with disabilities and disabled veterans. Compensation is based on factors including skills, qualifications, experience, and location; additional compensation and benefits may include health insurance, retirement plans, and paid time off. The company is not accepting unsolicited assistance from search firms.

Requirements

At least 10 years working in a leadership position across cybersecurity disciplines, including security assurance, governance, risk, compliance, audit, and business-facing assessment, risk, and resolution lifecycle management.
Hands-on experience leading external audits and regulatory reviews involving multiple, complex business workflows.
Experience creating and maintaining governance policies, compliance programs, security training, and board reporting formats.
Experience developing internal testing and control frameworks to ensure operational efficiency and compliance.
M&A experience driving security evaluations and providing comprehensive risk evaluations.
Experience leading functions and staff responsible for defending large, complex global computing enterprises, and understanding the strategic and tactical requirements to transform and maintain key security functions.
Expert knowledge of risk frameworks such as COSO and ISO 31000; industry-specific regulations such as SOX, HIPAA, GDPR, and CCPA; risk assessment; and mitigation strategies.
Knowledge of the cyber threat landscape, including adversaries, campaigns, and motivations, and ability to apply that knowledge to defending Versant.
Strong verbal and written communication and customer engagement skills, including experience briefing corporate executives and professionals.
Strong leadership skills, social and business acumen, and demonstrated success working with leaders across organizational and business lines to solve complex problems.
Experience providing direct support and input to business executives and leading the strategic direction of an organization’s mission.

Nice To Haves

Experience working in multiple large, complex environments, particularly within Governance, Risk, and Compliance functions.
Experience leading GRC functions in the media, entertainment, and/or advanced technology industries.
Experience building, maintaining, or transforming a risk management program.
Bachelor’s degree in an IT-related field and/or equivalent work experience.
Master’s degree in an IT-related field.

Responsibilities

Set the strategic direction of the GRC organization in alignment with Cyber partner organizations and the overall Cyber strategy.
Transform the maturity of existing functions, including ownership of the risk management lifecycle and operational processes.
Direct cross-business engagement, security-request intake, and prioritization across GRC services.
Direct outsourced services and staff to support operational efficiencies.
Evaluate security risks of technology implementations across brands and business units, and establish appropriate accountability within business leadership for accepted risks.
Build stakeholder relationships across business lines and advance an inclusive cyber defense mission applicable to Versant and its business areas.
Maintain a feedback loop with business partners and integrate their feedback into daily operations and strategic growth.
Influence and execute the Versant Cyber Organization’s strategic and tactical mission, leading its transformation, maturity, and sustainability.
Manage, develop, and support staff across experience levels while maintaining high standards for effectiveness and inclusion.
Lead external audits and regulatory reviews involving multiple, complex business workflows.
Create and maintain governance policies, compliance programs, security training, and board reporting formats.
Develop internal testing and control frameworks to support operational efficiency and compliance.
Drive security evaluations and comprehensive risk evaluations in M&A contexts.
Provide direct support and input to business executives and lead strategic direction for the organization’s mission.