Senior GRC Lead: Enterprise Risk & Compliance

Reliance, Inc. - IT; Chicago (IL); On-site; USD 120,000 - 140,000; Full time

Job summary

Reliance, Inc. is seeking a seasoned GRC Analyst III to lead the design, build, and maturation of the enterprise Governance, Risk & Compliance program.

You will partner with Information Security, IT, Internal Audit, Corporate Risk, Legal, and stakeholders to establish scalable, audit-ready processes and a mature GRC capability. You will guide platform implementation, risk assessment, policy governance, third-party risk, and executive reporting, mentoring team members and embedding regulatory

Qualifications

• Bachelor's degree or higher in information systems, cybersecurity, risk management, business, audit or related field.
• 7+ years in GRC, information security, IT risk management, compliance, audit, or related discipline.
• Experience helping implement, administer, or mature a GRC platform with controls, risk registers and dashboards.
• Strong knowledge of frameworks such as NIST CSF, NIST SP 800-53, CIS Controls, ISO/IEC 27001, SOC 2, CMMC, DFARS.
• Ability to lead risk assessments, document gaps, remediation plans, and communicate status to technical and non-technical stakeholders.
• Experience with policy lifecycle management and governance reporting preferred.

Responsibilities

• Lead the buildout and operation of Reliance’s enterprise GRC program.
• Define target-state GRC operating model, processes, roles, workflows, and governance routines.
• Lead configuration, rollout, data quality, and continuous improvement of the GRC platform.
• Create procedures, templates, and documentation to scale the program across units.
• Establish repeatable risk management processes and leadership reporting for risk posture and remediation progress.
• Translate findings from assessments, audits, vendor reviews, and security tools into prioritized risks and actions.
• Mentor junior team members and drive executive-ready communications.

Skills

GRC leadership

Regulatory requirements

Risk assessment

Communication

Audit readiness

Policy governance

Education

Bachelor's degree in Information Systems or related field

Tools

GRC platform

NIST/ISO frameworks

Job description

Reliance, Inc. is seeking a seasoned GRC Analyst III to lead the design, build, and maturation of the enterprise Governance, Risk & Compliance program.

You will partner with Information Security, IT, Internal Audit, Corporate Risk, Legal, and stakeholders to establish scalable, audit-ready processes and a mature GRC capability. You will guide platform implementation, risk assessment, policy governance, third-party risk, and executive reporting, mentoring team members and embedding regulatory