Program Manager, GRC & AI Strategy

TransUnion; Chicago (IL); Hybrid; USD 143,000 - 238,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) with employer match

Employee stock purchase plan (ESPP)

Paid time off and holidays

Parental leave

Job summary

TransUnion seeks a Senior Manager, InfoSec Risk Management & Governance in Chicago to partner with executives, translate priorities into governance plans, and lead a small team delivering key risk and performance metrics. The role focuses on governance reporting, dashboards, and continuous improvement of Cyber GRC processes.

The successful candidate will have 10+ years in cyber risk, governance, and compliance, and strong skills in Microsoft 365 and Power BI, delivering board-ready materials and

Qualifications

• 10+ years in cybersecurity, information security, risk management, compliance, governance, controls, or related field
• Experience supporting senior executives through strategic planning and data-driven decision-making
• Experience leading Cyber GRC, cyber risk, compliance, controls, or governance programs
• Knowledge of NIST CSF, NIST 800-53, ISO/IEC 27001, COBIT, CIS Controls, FFIEC, PCI DSS, SOX

Responsibilities

• Translate organizational priorities into executable plans and measurable outcomes
• Develop and maintain multi-year strategies, operating plans, and roadmaps
• Lead development and communication of KPIs, KRIs, risk-reduction measures, and governance reporting
• Create executive presentations and board-ready materials for leaders and stakeholders
• Lead a small team responsible for Cyber GRC reporting and analytics
• Modernize and automate Cyber GRC processes using AI and workflow automation

Skills

Power BI

Microsoft 365

Executive dashboards

Data analysis

Governance reporting

AI automation

Education

Bachelor's degree in cybersecurity, business administration, information technology, risk management, or related discipline

Master's degree preferred

Job description

TransUnion's Job Applicant Privacy Notice Personal Information We Collect Your Privacy Choices Team Overview The Global Cyber Governance, Risk & Compliance (GRC) team oversees cybersecurity governance, risk management, compliance, controls, and regulatory readiness across TransUnion. The team partners with Information Security, Technology, Audit, Compliance, Legal, Privacy, and Enterprise Risk Management to strengthen cyber resilience and support trusted business operations.

This position reports to the SVP, Global Cyber Governance, Risk & Compliance. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview and Core Responsibilities

Serve as a strategic advisor and operational partner to the SVP, Global Cyber Governance, Risk & Compliance, translating organizational priorities into executable plans and measurable outcomes.

Develop and maintain multi-year strategies, annual operating plans, organizational roadmaps, performance objectives, and a centralized operating rhythm for the Global Cyber GRC organization.

Lead the development and communication of key performance indicators, key risk indicators, risk-reduction measures, executive dashboards, and governance reporting for the CISO, executive leadership, and business stakeholders.

Create executive presentations, board-ready materials, and communication artifacts that translate complex cybersecurity, risk, compliance, and controls information into clear business insights.

Lead a small team responsible for Cyber GRC reporting, performance metrics, data analysis, governance reporting, and executive communications.

Modernize and automate Cyber GRC processes through artificial intelligence, workflow automation, analytics, and emerging technologies to improve efficiency, consistency, and scalability.

Partner with Information Security Officers, Technology, Audit, Compliance, Legal, Privacy, Technology Risk, Enterprise Risk Management, Finance, and business leaders to improve risk, control, and compliance reporting.

Oversee budget planning, workforce planning, resource allocation, and financial tracking activities for the Global Cyber GRC organization.

Monitor strategic initiatives and transformation efforts, providing leadership with visibility into progress, dependencies, risks, issues, remediation priorities, and business outcomes.

Required Knowledge and Experiences

At least 10 years of experience in cybersecurity, information security, risk management, compliance, governance, controls, technology risk, audit, or a related field, including experience operating in a complex enterprise environment.

Experience supporting senior executives through strategic planning, organizational governance, executive communications, operational management, and data-driven decision-making.

Demonstrated experience leading Cyber GRC, cyber risk, compliance, controls assurance, technology risk, or governance programs and translating complex requirements into measurable business outcomes.

Strong knowledge of cybersecurity governance, control effectiveness, regulatory compliance, and risk management methodologies, including frameworks such as the NIST Cybersecurity Framework, NIST Special Publication 800-53, ISO/IEC 27001, COBIT, CIS Controls, FFIEC, PCI DSS, and SOX.

Bachelor’s degree in cybersecurity, business administration, information technology, risk management, or a related discipline; a master’s degree is preferred.

Required Technical Skills

Advanced proficiency with Microsoft 365 and Power BI, including the development of executive presentations, dashboards, scorecards, and performance reports.

Experience using reporting and analytics platforms to analyze complex datasets and translate results into actionable recommendations for executive audiences.

Experience developing and managing key performance indicators, key risk indicators, risk-reduction measures, compliance reports, and control-effectiveness metrics.

Experience implementing artificial intelligence-enabled solutions and workflow automation tools to improve manual governance, assessment, reporting, and compliance processes.

Ability to design and maintain governance reporting frameworks, organizational operating models, and performance-measurement programs.

We’re also looking for the preferred skills below. Whether you are proficient or could use some brushing up, we’re happy to support your career development and growth in:

• A Certified Information Systems Security Professional, Certified Information Systems Auditor, Certified in Risk and Information Systems Control, Certified in the Governance of Enterprise IT, or comparable professional certification.
• Experience supporting a CISO-level organization and developing executive operating models, governance processes, and organizational performance frameworks.
• Experience leading large-scale Cyber GRC transformation, modernization, process-improvement, or automation initiatives.
• Experience working in a highly regulated industry, such as financial services, credit reporting, banking, insurance, or healthcare.
• Lean Six Sigma certification or experience applying structured process-improvement practices.

Benefits that support every part of your life:

• For Your Health: Enjoy day-one eligibility for medical, dental, and vision coverage, plus supplemental plan options. Spousal, domestic partner, and other eligible dependent coverage is available on select plans. Choose tax-advantaged HSA and FSA accounts to make everyday care more affordable.
• For Your Protection: We’ve got your back with company-paid basic life and AD&D, optional voluntary life and AD&D for you and your family, and short-and-long-term disability. You can also opt into a legal plan, pet insurance, and travel accident coverage.
• For Your Family: From adoption assistance and fertility planning coverage to caregiver support, we’re here for every chapter. Access Dependent Care FSA for possibility of an employer match, a complimentary Care@Work membership, and up to 12 weeks of paid parental leave with eligibility for a thoughtful, gradual return.
• For Your Future: Build toward what’s next with our 401(k) with employer match and Employee Stock Purchase Plan (ESPP). Tap financial wellness resources, career coaching, and optional long-term care insurance to plan confidently.
• For You: Grow and recharge with tuition reimbursement, flexible time off for exempt employees or paid time off for nonexempt employees, up to 12 paid holidays per year, commuter benefits, employee discounts, charitable gift matching, and paid volunteer time off, plus corporate volunteer events that make it easy to give back.
• For Your Wellness: Access 24/7 support including professional therapy, coaching, and emotional wellbeing programs alongside guided meditation and resources that support physical, mental, social, and financial wellness.

We are committed to being a place where diversity is not only present, it is embraced. As an equal opportunity employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, veteran status, genetic information, marital status, citizenship status, sexual orientation, gender identity or any other characteristic protected by law. Additionally, in accordance with Section 503 of the Rehabilitation Act of 1973 and the Vietnam Era Veterans’ Readjustment Assistance Act of 1974, TransUnion takes affirmative action to employ and advance in employment qualified individuals with a disability and protected veterans in all levels of employment and develops annual affirmative action plans. Components of TransUnion’s affirmative action program for individuals with disabilities and protected veterans are available for review to any associate or applicant for employment upon request by contacting [e-mail]. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers, the San Francisco Fair Chance Ordinance, Fair Chance Initiative for Hiring Ordinance, and the California Fair Chance Act. Adherence to Company policies, sound judgment and trustworthiness, working safely, communicating respectfully, and safeguarding business operations, confidential and proprietary information, and the Company’s reputation are also essential expectations of this position.

Pay Scale Information: The U.S. base salary range for this position is $142,500.00 - $237,500 annually. *The salary range for this position reflects a reasonable estimate of the range of compensation for this job. At TransUnion, actual compensation is based on careful consideration of additional factors such as (but not limited to) an individual’s education, training, work experience, job-related skill set, location, and industry knowledge, as well as the scope and responsibilities of the position and market considerations. Regular, fulltime non-sales positions may be eligible to participate in TransUnion’s annual bonus plan. Certain positions may also be eligible for long-term incentives and other payments based on applicable company guidance and plan documents.

TransUnion Overview: At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development - while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence. Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.

TransUnion's Internal Job Title: Sr Manager, InfoSec Risk Management & Governance

Company: TransUnion LLC