Qualifications

• Bachelor's degree in a relevant field; advanced degree preferred.
• 8+ years in governance, risk, compliance, or internal audit; 4 years in leadership.
• Expertise in regulatory standards like NIST, SOC 2, ISO 27001, PCI.
• Active certifications required: CISA, CRISC, CISSP, CIPP, CCEP; multiple preferred.
• Track record of developing GRC programs in tech environments.
• Strong communication skills to bridge compliance with business needs.
• Hands-on experience with GRC tools such as Jira, OneTrust, and Vanta.

Responsibilities

• Evolve and manage MRI's GRC framework, ensuring compliance and alignment with business objectives.
• Lead enterprise-wide risk assessments to identify and mitigate risks across various departments.
• Monitor regulatory changes and integrate them into compliance strategies.
• Drive and manage compliance audits and certifications like SOC 2 and ISO 27001.
• Design and conduct compliance training to foster a culture of accountability.
• Create and present risk and compliance reports for leadership and stakeholders.
• Oversee third-party risk management and vendor assessments.
• Lead incident response efforts regarding compliance issues or breaches.
• Mentor and manage a team of GRC analysts and specialists.
• Promote a compliance-centric culture through organizational collaboration.

Benefits

• Dynamic role with direct impact on company strategy and growth.
• Opportunity to lead and mentor a dedicated GRC team.
• Engagement in cross-functional collaboration with key departments.
• Access to ongoing professional development and certification opportunities.