Strategic IT GRC Lead & Risk Advisor

Westfield Insurance; Westfield Center (OH); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Westfield Insurance is seeking an IT Governance, Risk, and Compliance (GRC) Lead Analyst to lead the design, implementation, and continuous improvement of the organization’s IT governance, risk management, and compliance programs.

The role partners with business and technology leaders to align with enterprise objectives, drive a risk-aware culture, and serve as a trusted advisor to senior leadership on regulatory requirements, IT controls, and audit practices.

Qualifications

• 7+ years of experience in IT Governance, Risk, and Compliance, Information Security, IT Audit, or related disciplines.
• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business, or related field.

Responsibilities

• Lead the development, execution, and continuous improvement of the enterprise IT GRC program, frameworks, and operating model.
• Serve as the organization's subject matter expert for IT governance, risk management, compliance, and control oversight.
• Lead enterprise technology risk assessments and provide risk-based recommendations aligned with business objectives.
• Drive maturity of risk management practices through governance enhancements, process optimization, and industry best practices.
• Oversee compliance with regulatory requirements, industry standards, and internal policies, ensuring effective implementation of controls and monitoring mechanisms.
• Establish and maintain IT control frameworks, including ITGCs, cybersecurity controls, and key risk indicators (KRIs).
• Lead control assessments, testing, continuous monitoring, and remediation efforts to strengthen the organization's control environment.
• Serve as the primary liaison for internal and external audits, regulatory examinations, and issue remediation governance.
• Lead third-party technology risk management activities, including vendor assessments and ongoing risk oversight.
• Champion the implementation, optimization, and automation of GRC processes and technologies to improve efficiency and effectiveness.
• Develop and deliver executive-level reporting, dashboards, and insights on risk, compliance, audit results, and remediation activities.
• Lead cross-functional GRC initiatives, influence strategic decision-making, and mentor team members to foster a culture of risk awareness and continuous improvement.

Skills

GRC

IT Governance

Regulatory Compliance

IT Risk Management

Audit Practices

Cybersecurity Governance

Leadership

Education

Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business, or related field

Tools

GRC Platforms

Policy Management Systems

Audit Tools

Job description

Westfield Insurance is seeking an IT Governance, Risk, and Compliance (GRC) Lead Analyst to lead the design, implementation, and continuous improvement of the organization’s IT governance, risk management, and compliance programs.

The role partners with business and technology leaders to align with enterprise objectives, drive a risk-aware culture, and serve as a trusted advisor to senior leadership on regulatory requirements, IT controls, and audit practices.