GRC Lead: IT SOX & Risk Management

Genuine Parts Company; Alabama; On-site; USD 100,000 - 140,000; Full time

Job summary

Motion is seeking a Lead Governance, Risk & Compliance (GRC) Analyst to support their GRC functions, including Privacy, Compliance, Risk Management, Third-Party Risk, and Governance. The role leads the GRC team and manages day-to-day activities, with SOX lead experience to oversee the IT SOX organization.

The candidate will coordinate audits, monitor controls, and report performance to the Director of GRC while staying current with regulatory trends across IT and business stakeholders.

Qualifications

• Bachelor’s degree in computer science, software engineering, or related field.
• Five+ years in GRC, IT risk, or related areas; equivalent combination acceptable.

Responsibilities

• Own execution and day-to-day management of the GRC program area.
• Lead and coordinate Analyst-level team members as applicable.
• Coordinate audits, assessments, or reviews with evidence collection and remediation tracking.
• Monitor control or program effectiveness and drive continuous improvement.
• Serve as primary point of contact for the assigned domain across IT, business, and Legal/external parties.
• Own reporting on performance and posture to the Director of GRC.
• Maintain awareness of regulations, frameworks, and industry trends.
• Perform other duties as assigned.

Skills

Analytical skills

Documentation skills

Written & verbal communication

Independent work

Attention to detail

GRC tooling familiarity

Certification progress

Education

Bachelor’s degree in CS/IT or related field

Tools

GRC tools

Job description

Motion is seeking a Lead Governance, Risk & Compliance (GRC) Analyst to support their GRC functions, including Privacy, Compliance, Risk Management, Third-Party Risk, and Governance. The role leads the GRC team and manages day-to-day activities, with SOX lead experience to oversee the IT SOX organization.

The candidate will coordinate audits, monitor controls, and report performance to the Director of GRC while staying current with regulatory trends across IT and business stakeholders.