Consultant - Technology Governance, Risk, & Compliance

Together Credit Union; Missouri; Remote; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Consultant for Technology Governance, Risk, and Compliance. This senior-level role involves developing and executing a comprehensive governance strategy, ensuring compliance with regulatory standards, and influencing cross-functional teams. The ideal candidate will have extensive experience in building technology-focused GRC frameworks within financial institutions, with a strong emphasis on IT systems and cybersecurity. This position offers the opportunity to lead initiatives that shape the organization's risk management landscape while collaborating with senior leadership to drive impactful decisions. If you are passionate about technology governance and compliance, this role is perfect for you.

Qualifications

• 5+ years in technology governance or information risk management.
• Strong background in IT systems and cybersecurity is essential.
• Experience in developing GRC frameworks in financial institutions.

Responsibilities

• Drive technology governance, risk, and compliance strategy.
• Develop and implement risk management frameworks and policies.
• Lead GRC program execution and collaborate with senior leadership.

Skills

Technology Governance

Risk Management

Cybersecurity

Project Management

Communication Skills

Collaboration

Regulatory Compliance

Education

High School Diploma

Master of Business Administration

Tools

GRC Software

Risk Assessment Tools

Job description

Position: Consultant - Technology Governance, Risk, & Compliance

Location: St. Louis, MO

Remote Status: Remote

Job Id: 481

# of Openings: 1

We are seeking a Consultant for Technology Governance, Risk, & Compliance (GRC) at Together Credit Union to develop and lead the execution of our technology governance, risk, and compliance strategy. This is a senior-level independent contributor role, responsible for building and maintaining governance frameworks that align with regulatory requirements and organizational objectives.

The ideal candidate will have proven experience building technology-focused GRC frameworks within a financial institution. A strong background in IT systems, technology risk management, and cybersecurity is essential. The role requires hands-on execution, strategic planning, and the ability to influence cross-functional technology and business teams to ensure technology risks are effectively identified, assessed, and addressed. The candidate must be well-versed in industry standards like FFIEC, SOC 2, SDLC, GAAP, and the NIST cybersecurity framework, and have a proven track record in GRC program leadership, process design, risk evaluation, and project management.

Job Summary

The consultant for technology, governance, risk, & compliance (GRC) oversees and drives the strategy and execution of the organization's technology risk management and compliance initiatives. This role focuses on defining, building, and implementing technology governance frameworks and processes from the ground up. Collaborating with senior leadership and cross-functional teams, the GRC Director ensures that technology risks are identified, mitigated, and aligned with regulatory and organizational goals. This is a strategic, hands-on role that requires strong leadership in influencing decisions and driving cross-functional collaboration.

Job Responsibilities

• Owns and drives the overarching technology governance, risk, and compliance (GRC) strategy, ensuring alignment with organizational goals and delivering measurable impact across all functions.
• Defines, builds, implements, and maintains technology-related risk management frameworks, policies, and procedures to identify, assess, mitigate, and monitor technology risks, ensuring compliance and regulatory alignment.
• Leads the development, execution, and management of the GRC program, collaborating with senior leadership and cross-functional teams to assess and prioritize technology risks, recommend solutions, and drive risk mitigation strategies.
• Leads technology strategic planning cycles, ensuring continuous prioritization, alignment, and integration of technology initiatives across the organization to ensure effective risk management and regulatory compliance.
• Guides cross-functional teams in defining and optimizing long-term technology governance strategies, establishing objectives, KPIs, and reporting mechanisms to ensure consistency, accountability, and alignment with business goals.
• Establishes measurable objectives for enhancing technology risk management and compliance, driving continuous monitoring and improvement of governance practices across the organization.
• Leads regular technology risk assessments and audits to ensure ongoing compliance, identifying vulnerabilities, and recommending corrective actions to drive continuous improvement and mitigate emerging risks.
• Establishes and promotes best practices for managing emerging technology risks, ensuring systems, processes, and teams remain secure, compliant, and aligned with industry standards.
• Partners with senior leadership and cross-functional teams to drive a unified approach to managing technology risks and compliance, ensuring alignment with organizational objectives and regulatory requirements.
• Navigates ambiguity and adapts to the evolving needs of the organization, developing and implementing effective technology governance, risk management, and compliance strategies.
• Stays current with GRC trends, changes in technology, and industry standards, proactively ensuring the organization remains ahead of the curve with innovative, relevant practices.

Required Qualifications

• High school diploma or equivalent
• Minimum of 5 years of experience in technology governance or information risk management, or a related field
• Minimum of 5 years’ experience in finance/budget management
• Minimum 3 years’ experience in developing, communicating, and presenting technology governance concepts to executive leadership audiences
• Minimum 2 years’ management experience

Preferred Qualifications

• Master of business administration in computer science or information systems, or similar field
• Previous experience in technology governance, risk management, and compliance for a financial institution
• 8+ years in technology governance, risk management, and compliance

Knowledge, Skills, and Abilities (KSA’s)

• Extensive knowledge of GRC best practices.
• Familiarity with FFIEC, SOC2, SDLC, GAAP and other industry standards related to governance functions.
• Proven experience in developing and leading GRC programs with a high proficiency in process design and optimization, project management, and multi-functional collaboration.
• Proven track record to get deep into program and business details to unblock projects.
• Ability to evaluate risks, understand control and develop governance processes to support the company and complex issues, develop consensus, raise awareness, and provide and implement solutions.
• Strong communicator at all levels.
• Collaborative mindset and the ability to influence indirectly.
• Experience in banking, payments, or similarly regulated industries.
• Understanding of the NIST framework and other associated cyber security standards.
• Effective in building relationships with organizational leaders and influencing senior management.

Environmental or Atmospheric Conditions

• Remote work environment with the utilization of online technology, including various computer programs and systems.

Physical Abilities

• Ability to work at a computer in a stationary manner up to 8 hours daily.

Together Credit Union is an Equal Opportunity employer. The Credit Union complies with appropriate federal, state, and local laws and provides equal employment opportunities without regard to race, color, religion, gender, age, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected status to all qualified applicants and employees. Together Credit Union is committed to a policy of non-discrimination and dedicated to providing a positive discrimination-free work environment.