Governance, Risk & Compliance (GRC) Experts

eTeam; Anaheim (CA); On-site; USD 100,000 - 150,000; Full time

Job summary

A leading company in Anaheim is seeking a Governance Risk and Compliance professional to develop and maintain policies and frameworks. The role entails managing enterprise risk assessments, compliance monitoring, and vendor risk programs, promoting a risk-aware culture across departments. Candidates should have a relevant degree and extensive experience in GRC and cybersecurity governance.

Qualifications

• 5-10+ years in GRC, enterprise risk management, or cybersecurity governance roles.
• Certifications such as CISA, CRISC, CISM, CISSP preferred.
• In-depth knowledge of risk management principles and compliance frameworks.

Responsibilities

• Lead enterprise risk assessments and manage the corporate risk register.
• Monitor and ensure compliance with laws, regulations, and standards.
• Establish and manage third-party risk management programs.

Skills

Analytical thinking

Problem-solving

Communication

Stakeholder engagement

Influencing teams

Education

Bachelor's or Master's degree in Business, Risk Management, Information Security, Compliance

Tools

GRC platforms (e.g., Archer, ServiceNow, MetricStream, LogicGate)

Job description

Develop and maintain enterprise-wide policies, standards, and procedures to ensure alignment with regulatory and business requirements. Establish GRC frameworks and methodologies for consistent risk and compliance management across departments. Provide strategic guidance to senior leadership on GRC best practices and emerging regulatory requirements.

Lead enterprise risk assessments, including identification, analysis, mitigation, and monitoring of operational, IT, cybersecurity, and third-party risks. Manage the corporate risk register and provide periodic risk reports to executive leadership and board-level committees. Promote a risk-aware culture by integrating risk management into business processes.

Compliance :

Monitor, interpret, and ensure compliance with relevant laws, regulations, standards, and contractual obligations (e.g., ISO 27001, NIST, GDPR, SOX, HIPAA, PCI-DSS). Oversee audit and regulatory readiness activities; manage relationships with external auditors and regulatory bodies. Conduct compliance training and awareness programs across the organization.

GRC Tools & Reporting :

Administer and optimize the use of GRC platforms (e.g., Archer, ServiceNow, MetricStream, LogicGate). Develop dashboards, KPIs, and reports to communicate risk posture, policy adherence, and compliance status to stakeholders.

Third-Party & Vendor Risk :

Establish and manage a third-party risk management program including vendor assessments, due diligence, and contract reviews. Collaborate with procurement and legal teams to embed risk requirements in vendor selection and management processes.

Qualifications :

Bachelor's or Master's degree in Business, Risk Management, Information Security, Compliance, or related field. 5-10+ years of experience in GRC, enterprise risk management, or cybersecurity governance roles. In-depth knowledge of risk management principles, compliance frameworks, and governance structures. Certifications such as CISA, CRISC, CISM, CISSP, CGEIT, or ISO 27001 Lead Auditor / Implementer preferred. Experience with GRC tools and platforms is highly desirable.

Skills :

Strong analytical thinking and problem-solving skills. Excellent communication, facilitation, and stakeholder engagement abilities. Proven ability to influence cross-functional teams and drive organizational change. Strategic mindset with the ability to manage both details and the bigger picture.

Create a job alert for this search

Governance Compliance • Anaheim, CA, United States