• Architect, implement, and continuously mature the organization’s Governance, Risk, and Compliance (GRC) program • Lead organization-wide risk identification, analysis, and treatment processes • Lead end-to-end third-party risk management activities • Conduct formal risk assessments across infrastructure, application, vendor, and business process domains • Collaborate with cross-functional teams to integrate GRC principles into business processes and systems • Monitor evolving regulatory requirements, enforcement trends, and industry best practices • Provide guidance and training to employees on GRC policies, procedures, and best practices • Oversee the execution of audits, assessments, and compliance activities • Ensure documentation artifacts support evidentiary requirements for regulatory examinations and certification audits • Act as a liaison with external auditors, regulators, and stakeholders on GRC-related matters • Develop and maintain key performance indicators (KPIs) and metrics to measure the effectiveness of GRC initiatives • Mentor and coach GRC analysts, fostering their professional development and growth within the organization • Drive continual improvement of the organization’s information security program • Identify and document cyber risks and manage mitigation • Assist with ad-hoc compliance reporting • Provide support to Information Security Incident Response team • Review architectural designs and new technology initiatives