GRC Program Manager: Governance, Risk & Compliance

RevSpring, Inc.; Phoenix (AZ); On-site; USD 100,000 - 150,000; Full time

Job summary

RevSpring, a leading provider of secure, compliant information solutions, seeks a GRC Program Manager to design and implement a comprehensive GRC framework aligned with industry standards and regulatory requirements. You will lead governance policies, risk assessments, and audits while collaborating with cross‑functional teams to ensure regulatory readiness and operational excellence.

The role emphasizes building scalable governance processes, implementing NIST/HITRUST based controls, and

Qualifications

• Strong understanding of governance, risk and compliance principles.
• Experience in developing and implementing GRC programs.
• Knowledge of relevant laws, regulations, and industry standards.
• Strong analytical and problem‑solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Strong project management skills.

Responsibilities

• Develop and maintain governance framework, including policies, procedures, and standards.
• Assist with corporate governance activities, such as board meetings and shareholder communications.
• Identify, assess, and prioritize risks to the organization.
• Develop and implement risk mitigation strategies.
• Implement and manage a GRC framework (e.g., NIST, HITRUST) and use GRC tools to automate processes.
• Develop and maintain a GRC dashboard to track key metrics and performance indicators.
• Develop and implement an incident response plan and participate in post-incident reviews.

Skills

GRC principles

Regulatory knowledge

Risk assessment

Compliance programs

Communication

Project management

Independent work

Team collaboration

Education

Bachelor's degree in relevant field

Tools

GRC tools

NIST/HITRUST

PCI compliance tools

Job description

RevSpring, a leading provider of secure, compliant information solutions, seeks a GRC Program Manager to design and implement a comprehensive GRC framework aligned with industry standards and regulatory requirements. You will lead governance policies, risk assessments, and audits while collaborating with cross‑functional teams to ensure regulatory readiness and operational excellence.

The role emphasizes building scalable governance processes, implementing NIST/HITRUST based controls, and