GRC Lead: Security Risk & Compliance

MSIG USA; Warren Township (IA); On-site; USD 120,000 - 180,000; Full time

Job summary

MSIG USA seeks a Lead, Governance, Risk & Compliance (GRC) to mature our security governance, risk management, and compliance activities. You will mentor others, own broader initiatives, and support leadership with execution-focused delivery.

The role emphasizes hands-on work, regulatory compliance, IT risk management, policy governance, and third-party risk, with limited board-facing duties and close collaboration with senior security leadership.

Qualifications

• 5–8+ years of experience in GRC, IT risk management, IT audit, or information security.
• Hands-on experience with regulatory compliance, audits, or risk assessments.
• Working knowledge of NYDFS Cybersecurity Regulation (23 NYCRR 500) and major frameworks (NIST CSF, ISO 27001, etc.).
• Experience maintaining risk registers, audit evidence, or compliance documentation.
• Strong written communication skills with the ability to document risks, controls, and findings clearly.

Responsibilities

• Governance & Compliance Execution: Maintain and operate security governance and compliance program; track obligations, evidence, and deadlines; monitor regulatory changes.
• IT Risk Management: Conduct risk assessments across infrastructure, applications, and cloud; maintain risk register and remediation tracking.
• Audit & Regulatory Support: Coordinate audits; interact with auditors/regulators; track findings and remediation.
• Policy & Standards Management: Develop and maintain security policies and standards; promote awareness and adoption.
• Third-Party Risk Management: Perform vendor security risk assessments; maintain vendor risk documentation and remediation tracking.
• Reporting & Program Support: Prepare GRC metrics, dashboards, and leadership reports; support program improvements.

Skills

GRC expertise

IT risk management

Regulatory compliance

Audits

Written communication

Education

CISA

CRISC

CISM

CISSP

Tools

ServiceNow GRC

Archer

OneTrust

Azure

AWS

Job description

MSIG USA seeks a Lead, Governance, Risk & Compliance (GRC) to mature our security governance, risk management, and compliance activities. You will mentor others, own broader initiatives, and support leadership with execution-focused delivery.

The role emphasizes hands-on work, regulatory compliance, IT risk management, policy governance, and third-party risk, with limited board-facing duties and close collaboration with senior security leadership.