IT GRC Manager: Risk, Audit & Privacy

UDR Careers; Denver (CO); On-site; USD 131,000 - 150,000; Full time

Benefits offered by this job

Medical plan

Dental plan

Vision plan

401k match

FSA

Dependent Care FSA

Lifestyle spending

Job summary

UDR is seeking a Manager – IT Governance, Risk, and Compliance (GRC) to lead enterprise governance, risk management, and compliance programs. This role advances audit readiness, privacy, third‑party risk, IT policy management, and AI/data governance initiatives across the organization.

The Manager will collaborate with IT, Cybersecurity, Internal Audit, Legal, external auditors, and business stakeholders to manage compliance requirements, identify and mitigate risk, and ensure regulatory

Qualifications

• Minimum eight years in IT governance, risk, and compliance.
• Five years managing technology-focused programs and projects.
• Three years leading a team within IT GRC, privacy, or IT security.
• Experience supporting IT SOX controls, external audits, NIST CSF assessments, ISO 27001.

Responsibilities

• Lead IT SOX audit program and coordinate with external auditors.
• Direct annual NIST CSF self-assessment and report results.
• Develop and implement new compliance audits, incl. CCPA/CPRA requirements.
• Maintain IT policy library and ISO 27001 alignment.
• Oversee policy development, approvals, and exception requests.
• Manage policy management platform and evaluate GRC tools.
• Deliver audit status updates and risk reporting to leadership and the Board.
• Lead AI governance and privacy program components.

Skills

IT governance

Risk management

Compliance

Audit coordination

Vendor risk

Communication skills

Data governance

Education

Bachelor's degree in CS/IS/Cybersecurity

Job description

UDR is seeking a Manager – IT Governance, Risk, and Compliance (GRC) to lead enterprise governance, risk management, and compliance programs. This role advances audit readiness, privacy, third‑party risk, IT policy management, and AI/data governance initiatives across the organization.

The Manager will collaborate with IT, Cybersecurity, Internal Audit, Legal, external auditors, and business stakeholders to manage compliance requirements, identify and mitigate risk, and ensure regulatory