GRC & Quality Risk Strategist

Infor; Atlanta (GA); On-site; USD 120,000 - 170,000; Full time

Job summary

Infor in Atlanta seeks a Senior GRC & Quality Compliance Specialist to own the risk register, drive audit readiness, and support global regulatory compliance within the QRA function. You will coordinate with Legal, Compliance, IT, and ISO, and help integrate regulatory requirements into contracts and supplier oversight.

The role involves defining risk ownership, maintaining QMS documentation, and guiding governance in areas like AI risk, SOC 1/2 and ISO certifications.

Qualifications

• Proven experience supporting enterprise risk programs and audits.
• Experience leading internal audits against ISO 27001/9001 and SSDLC standards.
• Knowledge of ISO 27001, SOC 2, NIS2 and AI governance standards (EU AI Act, NIST AI RMF).
• Ability to own policy management and compliance documentation in a platform end-to-end.
• Manage compliance risk registers and drive remediation.

Responsibilities

• Maintain and evolve policy standards aligned to CSF/NIST CIS controls.
• Coordinate governance between Legal, Compliance, IT and ISO.
• Support the Infor QMS and ensure documentation control.
• Lead risk assessments and translate findings for leadership.
• Identify AI risk and align with AI governance frameworks.
• Support external certifications and audit readiness.
• Engage in contract negotiations with regulatory requirements.

Skills

Risk program management

ISO 27001/9001 knowledge

SOC 2 / NIS2 / AI governance

GRC tools (OneTrust, Navex IRM)

Audit coordination

Cross-functional collaboration

Education

ISO 9001/27001 Lead Auditor certification

PMP or equivalent project management certification

Tools

OneTrust

Navex IRM

Job description

Infor in Atlanta seeks a Senior GRC & Quality Compliance Specialist to own the risk register, drive audit readiness, and support global regulatory compliance within the QRA function. You will coordinate with Legal, Compliance, IT, and ISO, and help integrate regulatory requirements into contracts and supplier oversight.

The role involves defining risk ownership, maintaining QMS documentation, and guiding governance in areas like AI risk, SOC 1/2 and ISO certifications.