GRC program manager

JRD Systems

Dearborn (MI)

On-site

USD 149,760 - 216,320

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

A leading company is seeking a GRC Program Manager to ensure oversight of IT security risk and controls across business processes. This mid-senior level role involves developing security policies, managing risk assessments, and ensuring compliance across the organization. Candidates should bring extensive IT experience and a strong focus on leadership and communication, aiming to innovate and institute effective change in risk management.

Qualifications

7+ years multi-disciplined experience within an IT environment.
5 years in information security, privacy, and information protection leadership.
Experience in enforcement of IT security & controls policy.

Responsibilities

Develop and maintain the information security program and risk controls.
Collaborate on business and cyber risk program alignment.
Manage enterprise-wide data governance framework.

Skills

Problem-solving

Multitasking

Customer service

Judgment

Collaboration

Continuous improvement

Organization

Interpersonal communication

Job description

1 day ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

The GRC Program Manager has oversight responsibility for Information Technology (IT) security risk and controls for Information Technology and business processes. This role will develop and maintain policies, processes and procedures for IT, coordinating with other departments for enterprise-wide policies, processes and procedures.
Additionally, they will help develop and manage corporate-wide IT security and risk assessment programs and training for proactive risk management and control integration. This role is also responsible for preparation, support and remediation for audits and compliance reviews initiated internally or externally.
Essential Job Functions:
# Develop, implement, and maintain the information security program, risk and controls function.
# Collaborate and drive business and cyber risk program alignment across the enterprise, innovate and institute change to manage risk.
# Assist with the implementation and ongoing support for all security measures necessary to ensure Personally Identifiable Information (PII) is secure and all business requirements and applicable State and Federal regulations are met.
# Manage enterprise wide data governance framework, with a focus on improvement of organizational policies and standards, principles, governance metrics, processes, related tools and data architecture.
# Plan, execute, and manage multiple projects to budget, completing audits and business process control reviews.
# Review and test company-wide IT Security & Controls processes to assess business risks, controls, and the overall effectiveness.
# Develop and execute project and vendor risk assessments, recommend risk mitigation techniques, and identify opportunities for security and control improvements.
# Maintain active communication with project teams and vendors, managing expectations and ensuring adherence to policies.
# Work with and support leadership and team members to achieve goals of the IT Security and Controls team.
# Act as the key contact for Governance, Risk Management and Compliance (GRC) team.
# Work with complete audits, updating Component Assessments as needed.
# Create and update content for compliance and privacy training, facilitating sessions for employees and contractors as needed.
# Stay current on the ever-changing information security and privacy landscape, ensuring all policies and controls are relevant.

Other Responsibilities:

* Abide by the policies, procedures, and Code of Conduct of the company.
* Handle personal information (“PI”) that pertains to any individual (e.g., leads, dealers, employees, job applicants, etc.) in accordance with Privacy Policy and public facing privacy statements on managed websites.
* Complete any required training.
* Promptly report any known or suspected loss, theft or unauthorized disclosure or use of PI to the General Counsel/Chief Compliance Officer or Chief Information Officer.
* Adhere to the company’s compliance program.
* Safeguard the company’s intellectual property, information, and assets.
* Other duties as assigned.

Minimum Qualifications and Job Requirements:

** Multi-disciplined experience within an IT environment (7+ years).
** Information security, privacy and information protection leadership experience (5 years).
** IT Security & Controls policy and compliance enforcement experience.
** Experience successfully scoping, planning and driving technology development projects.
** Experience creating and enforcing security policies for the Enterprise and our Suppliers.
** ISO information security experience is a plus.
Skills, Knowledge, and Abilities
** Proactively problem-solve and multitask while maintaining composure and attention to detail.
** Follow-through mindset to uphold a ‘close the loop’ culture.
** A positive approach to serving customers and providing exceptional customer service.
** Ability to demonstrate good judgment, high ethics and project a professional image.
** Ability to work independently and as a collaborative team member with a positive ‘can do’ attitude.
** The drive to identify and seize opportunities for continuous improvement as business needs change.
** Excellent organization, flexibility and time management skills and the ability to work in a dynamic, deadline-driven environment.
** Exceptional interpersonal and business communication skills (written, verbal, listening).

Seniority level