IT GRC Lead Analyst

Westfield; Westfield Center (OH); Hybride; USD 110 000 - 150 000; Plein temps

Résumé du poste

Westfield is seeking a GRC Lead Analyst to design, implement, and mature its IT governance, risk, and compliance programs. The role partners with business and technology leaders to align risk management with enterprise objectives and fosters a proactive risk-aware culture.

The ideal candidate has deep expertise in governance frameworks, regulatory compliance, IT controls, risk management, and cybersecurity governance, with proven leadership in enterprise-wide initiatives and mentoring others.

Qualifications

• 7+ years of experience in IT Governance, Risk, and Compliance or related disciplines.
• Bachelor's degree as stated above.
• Ability to lead audits and manage regulatory requirements.
• Experience with enterprise IT controls and KRIs.

Responsabilités

• Lead the development, execution, and continuous improvement of the enterprise IT Governance, Risk, and Compliance (GRC) program, frameworks, and operating model.
• Serve as the organization's subject matter expert for IT governance, risk management, compliance, and control oversight.
• Lead enterprise technology risk assessments and provide risk-based recommendations aligned with business objectives and risk appetite.
• Drive the maturity of risk management practices through governance enhancements, process optimization, and industry best practices.
• Oversee compliance with regulatory requirements, industry standards, and internal policies, ensuring effective implementation of controls and monitoring mechanisms.
• Establish and maintain IT control frameworks, including ITGCs, cybersecurity controls, and key risk indicators (KRIs).
• Lead control assessments, testing, continuous monitoring, and remediation efforts to strengthen the organization's control environment.
• Serve as the primary liaison for internal and external audits, regulatory examinations, and issue remediation governance.
• Lead third-party technology risk management activities, including vendor assessments and ongoing risk oversight.
• Champion the implementation, optimization, and automation of GRC processes and technologies to improve efficiency and effectiveness.
• Develop and deliver executive-level reporting, dashboards, and insights on risk, compliance, audit results, and remediation activities.
• Lead cross-functional GRC initiatives, influence strategic decision-making, and mentor team members to foster a culture of risk awareness and continuous improvement.

Connaissances

Leadership

Strategic thinking

Stakeholder management

Risk assessment

Communication

Formation

Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business, or related field

Outils

GRC Platforms

Policy Management

Compliance Automation Tools

IT Risk Assessment

Description du poste

Job Summary

The IT Governance, Risk, and Compliance (GRC) Lead Analyst serves as a subject matter expert responsible for leading the design, implementation, maturity, and continuous improvement of the organization’s IT governance, risk management, and compliance programs.

This role provides strategic oversight of technology risk and control management, partners with business and technology leaders to ensure alignment with enterprise objectives and drives a proactive risk-aware culture across the organization. The GRC Lead Analyst serves as a trusted advisor to senior leadership, influencing risk-based decision-making and ensuring compliance with regulatory requirements, industry standards, and internal policies.

The ideal candidate possesses deep expertise in governance frameworks, regulatory compliance, IT controls, risk management, audit practices, and cybersecurity governance, along with demonstrated leadership in driving enterprise-wide initiatives and mentoring others.

Applicants must be currently authorized to work in the United States on a full-time basis without employer sponsorship.

Job Responsibilities

• Lead the development, execution, and continuous improvement of the enterprise IT Governance, Risk, and Compliance (GRC) program, frameworks, and operating model.
• Serve as the organization's subject matter expert for IT governance, risk management, compliance, and control oversight.
• Lead enterprise technology risk assessments and provide risk-based recommendations aligned with business objectives and risk appetite.
• Drive the maturity of risk management practices through governance enhancements, process optimization, and industry best practices.
• Oversee compliance with regulatory requirements, industry standards, and internal policies, ensuring effective implementation of controls and monitoring mechanisms.
• Establish and maintain IT control frameworks, including ITGCs, cybersecurity controls, and key risk indicators (KRIs).
• Lead control assessments, testing, continuous monitoring, and remediation efforts to strengthen the organization's control environment.
• Serve as the primary liaison for internal and external audits, regulatory examinations, and issue remediation governance.
• Lead third-party technology risk management activities, including vendor assessments and ongoing risk oversight.
• Champion the implementation, optimization, and automation of GRC processes and technologies to improve efficiency and effectiveness.
• Develop and deliver executive-level reporting, dashboards, and insights on risk, compliance, audit results, and remediation activities.
• Lead cross-functional GRC initiatives, influence strategic decision-making, and mentor team members to foster a culture of risk awareness and continuous improvement.

Job Qualifications

• 7+ years of experience in IT Governance, Risk, and Compliance, Information Security, IT Audit, or related disciplines.
• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business, or related field.

Location

Hybrid defined as three (3) or more days per week in the office.

Licenses and Certifications

• CISSP
• CISA
• CRISC
• CISM
• CGEIT

Behavioral Competencies

• Collaborates
• Communicates Effectively
• Customer Focus
• Decision Quality
• Nimble Learning

Technical Skills

• Insurance Industry Knowledge
• Regulatory Examinations
• GRC Platforms
• Policy Management
• Compliance Automation Tools
• IT Risk Assessment
• Control Design
• Security Testing

This job description describes the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties, skills, responsibilities, knowledge, etc. These may be subject to change and additional functions may be assigned as needed by management.