GRC Risk Principal

Job Summary

Leading the Governance, Risk, and Compliance (GRC) program, the full-time salaried GRC Risk Principal will manage enterprise-wide security governance, design risk management strategies, and oversee risk communication to enhance security culture and resilience in a remote work environment.

Key responsibilities

• Refine and manage security governance and risk management programs to align with business objectives
• Design and implement integrated risk management strategies, frameworks, and tools
• Enhance third-party risk management programs by collaborating with stakeholders across the organization

Required qualifications

• Minimum of 6 years of security experience, with a focus on technology and compliance
• At least 3 years in GRC leadership roles managing security governance and compliance functions
• Extensive experience in risk management and vendor security management
• Familiarity with cybersecurity and risk management frameworks
• CISSP and CISM certifications and/or advanced degree preferred