IT GRC Leader: Risk, Audit & Privacy

UDR; Highlands Ranch (CO); Hybrid; USD 131,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision Plans

401(k) Plan with company match

Paid time off

Job summary

UDR is seeking a Manager – IT Governance, Risk, and Compliance to lead enterprise GRC, privacy, and third-party risk programs. You will partner with IT, Cybersecurity, Internal Audit, Legal, and executives to drive audit readiness, policy management, and data governance initiatives.

You will build and mentor the GRC and Privacy team, report risk insights to IT leadership and the Board, and ensure compliance with CSF, NIST, ISO 27001, and privacy laws across states.

Qualifications

• Bachelor’s degree or equivalent in a related field.
• 8+ years in IT governance, risk, and compliance.
• 3+ years leading IT GRC/privacy or security programs.
• Experience supporting audits and policy development.
• Strong communication with senior leadership.

Responsibilities

• Lead IT SOX audit program and coordinate external audits.
• Direct annual CSF self-assessments and gap reporting.
• Develop and deploy new compliance audits including privacy audits.
• Maintain IT policy library and participate in policy reviews.
• Oversee policy management, approvals, and exception handling.
• Manage GRC tools and compliance calendar; report risk to leadership.

Skills

GRC leadership

Audit readiness

Policy management

Stakeholder management

Communication

Education

Bachelor’s degree in CS/IS/Cybersecurity

Tools

Microsoft Office

Job description

UDR is seeking a Manager – IT Governance, Risk, and Compliance to lead enterprise GRC, privacy, and third-party risk programs. You will partner with IT, Cybersecurity, Internal Audit, Legal, and executives to drive audit readiness, policy management, and data governance initiatives.

You will build and mentor the GRC and Privacy team, report risk insights to IT leadership and the Board, and ensure compliance with CSF, NIST, ISO 27001, and privacy laws across states.