Governance, Risk, and Compliance Manager

Position Overview: We are seeking a highly motivated and experienced Governance, Risk, and Compliance (GRC) Manager to join our team. This role will be responsible for managing the organization’s GRC framework, ensuring compliance with applicable regulations, and minimizing risks through effective governance practices. The ideal candidate will have a strong understanding of risk management, compliance frameworks, and corporate governance, with the ability to identify and address potential risks in our operations. Key Responsibilities: Governance: Develop, implement, and maintain a comprehensive GRC framework aligned with organizational goals. Ensure that governance structures are in place and effective across the organization. Risk Management: Identify, assess, and manage organizational risks, including operational, financial, cybersecurity, and compliance risks. Develop and implement risk mitigation strategies. Compliance Management: Ensure the organization complies with applicable laws, regulations, and internal policies. Conduct regular compliance audits and work with legal teams to monitor regulatory changes. Policy Development: Design, develop, and enforce policies and procedures to promote a culture of compliance and risk-awareness across all departments. Reporting: Prepare detailed risk and compliance reports for senior management and relevant stakeholders. Provide recommendations for improving governance and risk management practices. Training & Awareness: Develop and deliver training programs to employees on GRC topics, ensuring awareness and understanding of risk management, compliance, and governance policies. Continuous Improvement: Stay current with evolving GRC standards, best practices, and regulations to ensure the organization’s GRC practices remain effective and up to date. Qualifications: Bachelor’s degree in Business Administration, Information Systems, Risk Management, or a related field. A Master's degree or certifications (e.g., CRISC, CISA, CISM, ISO 27001) is preferred. At least 5 years of experience in GRC, risk management, compliance, or a related field. Strong knowledge of risk management frameworks, compliance regulations (e.g., SOX, GDPR, HIPAA), and industry best practices. Proven ability to assess and mitigate risks while balancing business objectives and compliance requirements. Strong communication, leadership, and interpersonal skills to interact with executives, department heads, and external regulators. Ability to analyze complex problems and develop practical, actionable solutions. Preferred Skills: Experience with GRC software tools (e.g., Archer, MetricStream). Knowledge of cybersecurity and data privacy regulations. Experience with internal audits and control assessments. Ability to work under pressure and meet deadlines in a fast-paced environment.