Job Summary:
We are seeking a highly skilled and experienced GRC Lead to join our organization. As a GRC Lead, you will be responsible for overseeing and managing the governance, risk, and compliance functions within the company. You will develop and implement strategies, policies, and procedures to ensure compliance with relevant regulations and industry standards. Your role will involve assessing and mitigating risks, conducting audits, and working closely with cross-functional teams to drive a culture of compliance and risk management.
Responsibilities:
- Develop and implement an effective governance, risk, and compliance framework and strategy for the organization.
- Stay updated on relevant laws, regulations, and industry standards to ensure the company’s compliance.
- Conduct risk assessments to identify potential areas of vulnerability and develop mitigation plans.
- Collaborate with internal teams to ensure compliance with policies, procedures, and controls.
- Lead the planning and execution of internal audits to assess compliance and identify areas for improvement.
- Provide guidance and training to employees on compliance-related matters and best practices.
- Establish and maintain effective relationships with regulatory bodies and external auditors.
- Monitor and report on key risk indicators and compliance metrics to senior management.
- Drive continuous improvement initiatives to enhance the company’s GRC program.
- Stay informed about emerging trends and developments in the GRC field and proactively recommend enhancements to existing practices.
Qualifications:
- Bachelor’s degree in a relevant field such as Business, Finance, or Law. A master’s degree is preferred.
- Proven experience (X years) working in a GRC role, preferably in a similar industry or organization.
- In-depth knowledge of relevant regulations and standards such as GDPR, ISO 27001, PCI-DSS, etc.
- Strong understanding of risk management methodologies and best practices.
- Excellent analytical and problem-solving skills with the ability to identify and assess risks effectively.
- Exceptional attention to detail and the ability to interpret and analyze complex information.
- Excellent communication and interpersonal skills with the ability to collaborate with stakeholders at all levels.
- Professional certifications such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or Certified Compliance & Ethics Professional (CCEP) are a plus.
- Strong leadership abilities with the capacity to influence and drive change within the organization.
- Proficiency in GRC software and tools is preferred.
If you are a highly motivated professional with a passion for governance, risk, and compliance, and possess the qualifications mentioned above, we would love to hear from you. Please submit your resume and a cover letter detailing your relevant experience and achievements in the GRC field.