Senior IT GRC & Privacy Leader

UDR EAS LLC; Highlands Ranch (CO); On-site; USD 131,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision Plans

401(k) Plan with company match

Voluntary Life Insurance

Voluntary Long Term Care Insurance

Job summary

UDR is seeking a Manager – IT Governance, Risk, and Compliance (GRC) to lead and strengthen enterprise technology governance, risk management, and compliance programs. You will advance audit readiness, consumer privacy, third-party risk management, IT policy management, and AI and data governance initiatives across the organization.

You will partner with IT, Cybersecurity, Internal Audit, Legal, auditors, and business stakeholders to manage compliance and mitigate risk.

Qualifications

• Eight years in IT governance, risk, and compliance.
• Five years managing technology-focused programs and projects.
• Three years leading a team within IT GRC, privacy, or IT security.
• Experience supporting IT SOX controls, external audits, NIST CSF, ISO 27001.

Responsibilities

• Lead IT SOX audit program and coordinate external audits.
• Direct annual NIST CSF self-assessment and reporting.
• Develop/combine new audits including CCPA/CPRA requirements.
• Maintain IT policy library and ISO 27001 alignment.
• Oversee policy development, approvals, and reviews.
• Manage policy management platform and evaluate GRC tools.
• Deliver audit status updates and risk reporting to leadership/Board.
• Support AI governance program and risk classifications.
• Oversee DSARs and privacy requests across states.
• Monitor state privacy legislation and privacy policy updates.
• Collaborate with Marketing/Legal on privacy controls.
• Oversee vendor risk management and contracting protections.

Skills

IT GRC

Audit management

SOX controls

NIST CSF assessments

Privacy/compliance

Vendor risk management

Policy development

Leadership

Cross-functional collaboration

Education

Bachelor’s degree in Computer Science/Information Systems/Cybersecurity

Equivalent education/experience

Tools

Microsoft Office

Job description

UDR is seeking a Manager – IT Governance, Risk, and Compliance (GRC) to lead and strengthen enterprise technology governance, risk management, and compliance programs. You will advance audit readiness, consumer privacy, third-party risk management, IT policy management, and AI and data governance initiatives across the organization.

You will partner with IT, Cybersecurity, Internal Audit, Legal, auditors, and business stakeholders to manage compliance and mitigate risk.