Senior Director, GRC & Third-Party Risk Management

independencepetgroup; United States; On-site; USD 172,000 - 252,000; Full time

Job summary

Independence Pet Holdings in Chicago seeks a Director of Governance, Risk & Compliance to design and mature a unified risk program across its multi-entity insurance platform. This executive role blends regulatory fluency, enterprise governance, and strategic leadership to align controls across MGAs and carriers in a highly regulated environment.

You will lead regulatory readiness, implement NIST 800-53, ISO 27001, SOC 2, PCI DSS, drive TPRM across the vendor lifecycle, and report to the C-suite.

Qualifications

• 12–15+ years progressive experience in cybersecurity, risk management, compliance, or audit.
• 5–7+ years in senior leadership roles within insurance or regulated financial services environments.
• Proven success leading enterprise GRC and TPRM programs across complex, multi-entity organizations.

Responsibilities

• Own enterprise-wide information security compliance posture across all operating entities.
• Establish defensible control environment able to withstand regulatory scrutiny.
• Lead regulatory readiness for NYDFS, state regulators, and international frameworks.
• Build and scale a comprehensive TPRM program across the vendor lifecycle.
• Drive automation strategy using GRC platforms for real-time visibility.
• Provide regular executive reporting to the board and senior leaders.

Skills

GRC leadership

Regulatory compliance

Auditing & risk

Vendor risk management

Executive reporting

NIST 800-53

ISO 27001

SOC 2

PCI DSS

NYDFS

Education

JD or CPA

MBA preferred

Tools

Drata

Audioboard

GRC platforms

Job description

Independence Pet Holdings in Chicago seeks a Director of Governance, Risk & Compliance to design and mature a unified risk program across its multi-entity insurance platform. This executive role blends regulatory fluency, enterprise governance, and strategic leadership to align controls across MGAs and carriers in a highly regulated environment.

You will lead regulatory readiness, implement NIST 800-53, ISO 27001, SOC 2, PCI DSS, drive TPRM across the vendor lifecycle, and report to the C-suite.