IT Governance & Risk Management Lead

The Institutes; Malvern (Chester County); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

401(k) with company contribution up to

Paid maternity and parental leave

Medical, dental, vision coverage

On-campus lunch and fitness center

Job summary

The Institutes is seeking an experienced Manager, IT Governance, Risk & Compliance in Malvern, PA. You will lead enterprise governance for cybersecurity, risk management, compliance, BCDR, and AI governance while coordinating across engineering, legal, and CIO partners.

You will drive vendor risk, policy development, and executive reporting, ensuring alignment with NIST CSF and enterprise standards. This role demands collaboration, strategic oversight, and hands‑on governance leadership.

Qualifications

• Bachelor's degree in information technology or related field; minimum 3 years leading governance, risk, compliance or assurance.
• Experience managing audits, control frameworks and external assessors; familiarity with TPRM preferred.
• Technical fluency across IT infrastructure, cloud environments, and software delivery.

Responsibilities

• Lead IT governance, risk, and compliance programs across the enterprise.
• Oversee Third-Party Risk Management, vendor risk analysis, and contract reviews.
• Coordinate AI governance, data governance, and risk analytics reporting.
• Manage audits, evidence collection, remediation tracking, and external assessors.

Skills

Leadership

Governance

Risk management

Security

Audits

Communication

Education

Bachelor's degree in information technology

or equivalent experience

Tools

OneTrust

AWS

Microsoft stack

Job description

The Institutes is seeking an experienced Manager, IT Governance, Risk & Compliance in Malvern, PA. You will lead enterprise governance for cybersecurity, risk management, compliance, BCDR, and AI governance while coordinating across engineering, legal, and CIO partners.

You will drive vendor risk, policy development, and executive reporting, ensuring alignment with NIST CSF and enterprise standards. This role demands collaboration, strategic oversight, and hands‑on governance leadership.