GRC & Security Compliance Lead

OP RaaS; Eads (CO); Presencial; USD 120.000 - 190.000; Jornada completa

Descripción de la vacante

OP RaaS seeks a seasoned GRC leader to drive governance, risk, and compliance across the enterprise. You will lead a team of analysts and advisors, coordinate audits, and align controls with regulatory standards.

You will partner with executives and technical teams to strengthen the control environment, develop security policies, and oversee remediation initiatives, while promoting enterprise-wide GRC awareness.

Formación

• 5+ years in governance, risk or compliance with 2+ years in leadership.
• Strong knowledge of SOX, NIST, ISO 27001, COBIT.
• Experience managing audits, risk assessments and remediation.
• Ability to develop policies and control frameworks.
• Certifications such as CISA/CRISC/CISM or ISO 27001 Lead preferred.

Responsabilidades

• Lead and manage the GRC team, including hiring and performance development.
• Oversee enterprise compliance and risk programs ensuring regulatory alignment.
• Direct audits and certification processes, address findings and remediation.
• Develop and maintain information security policies, standards and governance.
• Partner with executives to advise on compliance requirements and risks.
• Promote awareness and adoption of governance across the enterprise.
• Strategic leadership to align compliance with business priorities.
• Ensure compliance with laws, regulations, and company policies.
• Perform other duties as assigned.

Conocimientos

GRC Leadership

Audits & Risk

Policy Development

Regulatory Knowledge

Stakeholder Engagement

Educación

Bachelor’s degree or equivalent

Certifications such as CISA/CRISC/CISM

Descripción del empleo

OP RaaS seeks a seasoned GRC leader to drive governance, risk, and compliance across the enterprise. You will lead a team of analysts and advisors, coordinate audits, and align controls with regulatory standards.

You will partner with executives and technical teams to strengthen the control environment, develop security policies, and oversee remediation initiatives, while promoting enterprise-wide GRC awareness.