Governance, Risk, and Compliance (GRC) Program Manager

RevSpring; Nashville (TN); On-site; USD 110,000 - 140,000; Full time

Job summary

RevSpring, Inc. is seeking a Governance, Risk, and Compliance (GRC) Program Manager in Nashville, TN to lead the development and execution of a comprehensive GRC framework aligned with industry standards.

The role covers governance, risk assessment, regulatory compliance, incident response, and ongoing improvement through metrics and dashboards. A bachelor's degree and 5+ years in GRC or related fields are required; HITRUST experience is preferred.

Qualifications

• Strong understanding of governance, risk, and compliance principles.
• Experience in developing and implementing GRC programs.
• Knowledge of relevant laws, regulations, and industry standards.
• Strong analytical and problem‑solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Strong project management skills.

Responsibilities

• Develop and maintain a robust governance framework, including policies, procedures, and standards.
• Assist with corporate governance activities, such as board meetings and shareholder communications.
• Ensure effective communication and collaboration between different departments and stakeholders.
• Identify, assess, and prioritize risks to the organization.
• Develop and implement risk mitigation strategies.
• Monitor and report on key risk indicators.
• Conduct regular risk assessments and audits.
• Ensure compliance with relevant laws, regulations, and industry standards.
• Develop and implement compliance programs and policies.
• Monitor and report on compliance performance.
• Conduct internal audits and investigations to identify compliance gaps.
• Implement and manage a GRC framework, such as NIST, HITRUST.
• Utilize GRC tools and technologies to automate processes and improve efficiency.
• Develop and maintain a GRC dashboard to track key metrics and performance indicators.
• Develop and implement an incident response plan.
• Participate in incidents and breaches.
• Conduct post-incident reviews and lessons learned.

Education

Bachelor's degree in a relevant field

Job description

Job Title: Governance, Risk, and Compliance (GRC) Program Manager

Job Summary

As a GRC Program Manager, you will play a critical role in safeguarding our organization's reputation and ensuring operational excellence. You will be responsible for developing and implementing a comprehensive GRC framework that aligns with industry best practices and regulatory requirements.

Governance

Essential Functions

• Develop and maintain a robust governance framework, including policies, procedures, and standards.
• Assist with corporate governance activities, such as board meetings and shareholder communications.
• Ensure effective communication and collaboration between different departments and stakeholders.

Risk Management

• Identify, assess, and prioritize risks to the organization.
• Develop and implement risk mitigation strategies.
• Monitor and report on key risk indicators.
• Conduct regular risk assessments and audits.

Compliance

• Ensure compliance with relevant laws, regulations, and industry standards.
• Develop and implement compliance programs and policies.
• Monitor and report on compliance performance.
• Conduct internal audits and investigations to identify compliance gaps.

GRC Framework Implementation

• Implement and manage a GRC framework, such as NIST, HITRUST.
• Utilize GRC tools and technologies to automate processes and improve efficiency.
• Develop and maintain a GRC dashboard to track key metrics and performance indicators.

Incident Response

• Develop and implement an incident response plan.
• Participate in incidents and breaches.
• Conduct post-incident reviews and lessons learned.

Minimum Requirements

Specific Job Skills:

• Strong understanding of governance, risk, and compliance principles and frameworks.
• Experience in developing and implementing GRC programs.
• Knowledge of relevant laws, regulations, and industry standards.
• Strong analytical and problem‑solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Strong project management skills.

Education: Bachelor's degree in a relevant field (e.g., business, finance, information technology, or law).

Experience: 5+ years of experience in GRC, risk management, or compliance roles.

Supervision: N/A

Certifications: Certification in GRC or related fields (e.g., CISA, NIST, HITRUST, PCI) HITRUST is preferred.

Language Skills

Ability to read, analyze and interpret general business periodicals, professional journals, technical procedures or governmental regulations. Ability to write reports, business correspondence and procedure manuals. Ability to effectively present information and respond to questions from a variety of both internal and external sources.

Physical Capabilities: Standard categories

The physical capabilities described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit; use hands to finger, handle, or feel; reach with hands and arms; and talk or hear. The employee is occasionally required to stand and walk. The employee must occasionally lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus.

RevSpring is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.

Note:

This Job Description may not describe all of the job responsibilities and standards assigned to this position. The duties may change from time to time. RevSpring does not discriminate against any group in hiring or employment practices. Nothing in this job description constitutes a contract for employment.