** This role is not eligible for sponsorship AND is four days onsite hybrid at our N. Scottsdale office **Your Responsibilities- Independently lead technology and enterprise risk assessments, identifying emerging risks, evaluating their impact and likelihood, and recommending practical treatment strategies
- Partner with business and technology owners to assign accountability and track risks through to remediation
- Lead reviews of control design and operating effectiveness aligned with PCI (Payment Card Industry), SOX (Sarbanes-Oxley), NIST CSF (National Institute of Standards and Technology Cybersecurity Framework), and related frameworks
- Serve as a primary point of contact for external auditors, from planning and walkthroughs to evidence coordination and remediation tracking
- Monitor regulatory, contractual, and industry standards changes, translate them into clear control expectations, and recommend process improvements
- Own technology GRC policies and lead the full policy lifecycle: drafting, stakeholder review, approval, rollout, and periodic refresh
- Design and maintain dashboards, metrics, KPIs (key performance indicators), and KRIs (key risk indicators) that give leaders clear visibility into risk, and present trend and root-cause insights to leadership and governance forums
- Own and update risk and compliance training content and report on completion and exceptions
- Mentor junior analysts and drive continuous improvement and standardization across GRC processes
Your Experience, Skills & Competencies- Bachelor's degree in Information Systems, Business, Accounting, Cybersecurity, or related field required, or equivalent experience
- At least 7 years' experience in Governance, Risk & Compliance, IT audit, cybersecurity, or related fields, including leading risk assessments, control testing, and audit engagements with minimal supervision
- Proficient in Microsoft Outlook, Excel, PowerPoint and Word
- Deep working knowledge of frameworks such as SOX, PCI, NIST CSF, ISO 27001, and SOC 2
- Experience with ServiceNow Integrated Risk Management (IRM) is preferred
- Demonstrates key competencies to include advanced analytical and critical thinking, influencing senior technical and non-technical stakeholders, and clear written and verbal communication, including executive-level reporting
Your TeamThis role will reside in our Scottsdale, Arizona office. It is an individual contributor role that will report to the Senior Manager, GRC. You will have peer teammates and collaborate with cross functional departments such as Technology, Internal Audit, Legal, and Privacy on a regular basis.
**This role is not eligible for sponsorship**
Choice prioritizes our associate wellbeing by offering a comprehensive benefits program that is both competitive and flexible to help you achieve your wellbeing goals - here are just a few:
- Competitive compensation and benefits, including medical, dental, and vision coverage
- Leave and paid time-off for holidays, vacation, personal, family, volunteer, sick, jury duty, bereavement, military, and religious observance
- Financial benefits for retirement and health savings
- Employee recognition programs
- Discounts at Choice hotels worldwide
