IT GRC Program Lead: Risk, Compliance & Policy

Cynosure IT Innovations LLC; Chicago (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

Cynosure IT Innovations LLC is seeking an experienced IT Governance, Risk, and Compliance (GRC) professional to lead and manage the organization’s IT GRC program. The role focuses on strengthening governance structures, identifying and mitigating IT risks, and ensuring ongoing compliance with regulatory, legal, and industry requirements.

You will partner with business and technology teams to foster a risk-aware culture.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related discipline.
• Professional certifications such as CISA, CISSP, CRISC are highly preferred.
• 7+ years of hands-on experience in IT Governance, Risk Management, and Compliance roles.
• Proven experience implementing and managing GRC frameworks such as ISO 27001, NIST, COBIT.
• Strong knowledge of regulatory and compliance requirements including GDPR, HIPAA, SOX.

Responsibilities

• Design, implement, and oversee the end-to-end IT GRC program.
• Establish and enhance governance frameworks, policies, and standards.
• Identify, assess, and prioritize IT and information security risks.

Skills

GRC experience

Stakeholder management

Communication

Collaboration

Education

Bachelor’s degree in Information Security or related

Tools

ISO 27001

NIST

COBIT

Job description

Cynosure IT Innovations LLC is seeking an experienced IT Governance, Risk, and Compliance (GRC) professional to lead and manage the organization’s IT GRC program. The role focuses on strengthening governance structures, identifying and mitigating IT risks, and ensuring ongoing compliance with regulatory, legal, and industry requirements.

You will partner with business and technology teams to foster a risk-aware culture.