Roles and Responsibilities

• Develop, update, and maintain IT policies, procedures, and documentation to align with organizational GRC goals.
• Ensure compliance with frameworks like COBIT, NIST 800-53, FFIEC, and other regulations through regular updates and gap analyses.
• Work across teams to implement and monitor GRC goals. Utilize GRC tools to conduct risk assessments, produce compliance reports, and identify areas for improvement.
• Regularly review and update policies and procedures to align with changing regulations, industry standards, and business goals.
• Ensure policies are communicated effectively and are accessible to all employees. Provide ongoing training and support on GRC topics.
• Stay informed on relevant laws, standards, and regulations, and communicate their impact to stakeholders.

Required Skills & Experience

• Experience developing and maintaining IT policies in alignment with GRC objectives and organizational goals.
• Familiarity with governance, risk management, and compliance frameworks (e.g., COBIT, NIST, FFIEC).
• Strong understanding of risk management and compliance processes, with the ability to conduct gap analyses and provide actionable insights.
• Excellent written and verbal communication skills for presenting complex information to various stakeholders.
• Ability to work effectively with cross-functional teams and analyze complex data to drive GRC improvements.

Posted By