GRC Director: Risk, Compliance & Policy Lead

Colonial Group; Los Angeles (CA); Vor Ort; USD 210.000 - 225.000; Vollzeit

Zusammenfassung

Cosm is seeking an experienced Governance, Risk, and Compliance (GRC) leader to shape and scale an enterprise-wide program. You will manage risk, assurance, and policy across IT, security engineering, and operations, driving adherence to NIST CSF 2.0, SOX ITGC, and TPN content-security standards.

You will build the GRC function from the ground up, hire and mentor the team, and partner with executives to enable business growth including IPO readiness.

Qualifikationen

• 8–12 years in IT governance, risk, and compliance, including leading GRC programs
• Hands-on experience with risk registers, risk assessments, and control testing
• Independent control testing experience supporting SOX ITGC or pre-IPO readiness
• Experience planning and executing internal audits, and vendor security reviews

Aufgaben

• Operate and mature the enterprise cyber risk register and scoring.
• Lead independent assurance over control design and operating effectiveness.
• Track and ensure regulatory compliance with NIST CSF 2.0, SOX ITGC, and related standards.
• Own third-party and vendor risk programs end to end.
• Develop and maintain IT and security policies and a mapped control framework.
• Build training and awareness programs; drive governance and board reporting.
• Collaborate with Legal, Procurement, and Engineering for risk-driven decisions.
• Scale the GRC function, including hiring and team development.

Kenntnisse

GRC program leadership

Risk register management

SOX ITGC

Internal audit readiness

Vendor risk management

NIST CSF 2.0

Policy development

Stakeholder communication

Security governance

Ausbildung

Bachelor's degree in a related field

Tools

Vanta

GRC platform

Audit tooling

Jobbeschreibung

Cosm is seeking an experienced Governance, Risk, and Compliance (GRC) leader to shape and scale an enterprise-wide program. You will manage risk, assurance, and policy across IT, security engineering, and operations, driving adherence to NIST CSF 2.0, SOX ITGC, and TPN content-security standards.

You will build the GRC function from the ground up, hire and mentor the team, and partner with executives to enable business growth including IPO readiness.