Senior Governance Specialist

Summit Consulting; Kentucky; Hybrid; USD 110,000 - 165,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Wellness plans

Parental leave

Adoption assistance

Tuition reimbursement

Paid Time Off

Paid holidays

401(k) plan with company match

Employee stock purchase plan

Commuter benefits

Job summary

Great American Insurance Group is seeking an experienced IT Governance, Risk, and Compliance professional to design, implement, and oversee governance processes across P&C IT. The role partners with IT leadership, application and infrastructure teams, Internal Audit, and enterprise governance to identify and mitigate technology risks.

The ideal candidate will drive compliance across SOX, access governance, vulnerability management, and risk reporting, while leveraging automation and AI-enabled

Qualifications

• Bachelor's degree or equivalent in a relevant field.
• 6+ years of IT governance, risk management, compliance, or audit.
• Familiarity with IT governance frameworks and regulatory requirements.

Responsibilities

• Design, execute, and improve IT governance, risk, and compliance processes across the P&C IT organization.
• Coordinate with IT leadership, application and infrastructure teams, Internal Audit, and enterprise governance functions.
• Support SOX, access governance, audit support, vulnerability management, enterprise risk management, and internal IT control activities.
• Develop risk reporting, dashboards, metrics, and insights for leadership visibility into technology risks and remediation progress.
• Facilitate IT audits and reviews, coordinate evidence requests, document results, and track remediation.

Skills

Communication skills

Stakeholder engagement

Business relationship skills

Analytical thinking

Education

Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, Business Administration, or related field

Tools

ServiceNow

SailPoint

Job description

Be Here. Be Great. Working for a leader in the insurance industry means opportunity for you. Great American Insurance Group's member companies are subsidiaries of American Financial Group. We combine a "small company" culture where your ideas will be heard with "big company" expertise to help you succeed. With over 30 specialty and property and casualty operations, there are always opportunities here to learn and grow. At Great American, we value and recognize the benefits derived when people with different backgrounds and experiences work together to achieve business results. Our goal is to create a workplace where all employees feel included, empowered, and enabled to perform at their best. This position is not eligible for employment visa sponsorship. Applicants must be authorized to work in the United States without the need for current or future sponsorship. P&C IT Services provides professional services to help our business units and corporate functions use technology to create, manage, and optimize information and business processes. IT Services spans a wide range of activities, including software development, data management, Cloud services, IT security, technical support, access governance, infrastructure management, and the procurement and maintenance of equipment and software. The overall goal of IT Services is to deliver technology solutions that increase efficiency, reduce costs, and give our company a competitive advantage. Great American’s culture is built on connection, shared learning, and strong relationships. This is a hybrid role that combines in-office and remote work. Employees are expected to maintain a meaningful on-site presence to support collaboration, relationship building, and business success.

Essential Job Functions and Responsibilities

Supports the design, execution, and continuous improvement of IT governance, risk, and compliance processes across the P&C IT organization. Partners with IT leadership, application teams, infrastructure teams, business stakeholders, Internal Audit, and enterprise governance functions to identify, assess, monitor, and communicate technology risk. Supports compliance readiness and control execution across areas such as SOX, access governance, audit support, vulnerability management, enterprise risk management, and internal IT control activities. Leverages Automation and Artificial Intelligence, analytics, and reporting capabilities to modernize governance processes, reduce manual effort, improve consistency, and enhance operational efficiency. Develops and improves risk reporting, dashboards, metrics, and insights to strengthen leadership visibility into technology risks, control health, remediation progress, and mitigation priorities. Identifies opportunities to streamline and automate repeatable governance activities, including evidence collection, control monitoring, compliance validation, issue tracking, and risk mitigation workflows. Facilitates IT audits, assessments, and reviews by coordinating evidence requests, documenting results, tracking remediation activities, and communicating status to stakeholders. Maintains and enhances documentation for IT governance and compliance processes, including control matrices, procedures, risk records, evidence repositories, process flows, and reporting materials. Provides guidance, consultation, and training to IT and business stakeholders on governance expectations, control responsibilities, risk management practices, and compliance requirements. Monitors emerging technology, risk, compliance, and AI-enabled process improvement trends to help P&C IT Risk and Compliance evolve its practices and capabilities. Serves as a trusted advisor and collaborative partner to technical teams, business stakeholders, and leadership by translating complex risk and compliance topics into practical guidance and actionable next steps. Performs other duties as assigned.

Qualifications

Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, Business Administration, or a related field. Generally, a minimum of 6 years of IT governance, risk management, compliance, or audit. Completion of or continuing progress toward a professional designation preferred, such as Certified in the Governance of Enterprise IT (CGEIT), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Risk and Information Systems Control (CRISC). Strong understanding of IT governance frameworks and regulatory compliance requirements. Stays current on emerging IT risks, technologies, and regulatory changes affecting the insurance industry. Proficiency in GRC tools and platforms supporting governance processes (e.g., ServiceNow, SailPoint). Excellent communication, stakeholder engagement, and business relationship skills. Requires a high level of understanding of organization's business and technology operations. Demonstrates analytical, problem-solving, and organizational skills with attention to detail. Ability to lead and consult on provide technical and process recommendations and provide guidance to team members.

Business Unit: Property & Casualty IT Services

Benefits:

• We offer competitive benefits packages for full-time and part-time employees*
• Full-time employees have access to medical, dental, and vision coverage, wellness plans, parental leave, adoption assistance, and tuition reimbursement.
• Full-time and eligible part-time employees also enjoy Paid Time Off and paid holidays, a 401(k) plan with company match, an employee stock purchase plan, and commuter benefits.
• Compensation varies by role, level, and location and is influenced by skills, experience, and business needs.
• Your recruiter will provide details about benefits and specific compensation ranges during the hiring process.
• Learn more at http://www.gaig.com/careers.
• *Excludes seasonal employees and interns.

Why can you trust Great American Insurance Group?

For nearly 150 years, Americans have trusted us to protect them. Our innovative insurance solutions and specialization serves niche marketplaces that we know well. This expertise gives us a successful foundation that spans generations.

You never know where a career in insurance will take you. Whether you are starting your career or is looking for a company to grow your experience, at Great American Insurance Group, you can join our more than 8,500 employees to “Be Here. Be GREAT!” To learn more, visit our Career Page