Lead the design and execution of the organization’s GRC strategy, ensuring it aligns with corporate goals and objectives.
Develop and implement governance frameworks, risk management processes, and compliance programs that adhere to regulatory requirements and industry standards.
Oversee the risk management process, including risk identification, assessment, mitigation, and monitoring.
Ensure compliance with relevant laws, regulations, and internal policies, including data protection, cybersecurity, financial, and operational regulations.
Establish and maintain a strong risk management and compliance culture throughout the organization.
Provide leadership and guidance to cross-functional teams to ensure effective implementation of GRC initiatives.
Lead internal and external audits, managing the process and ensuring timely remediation of identified issues.
Monitor and report on the organization’s risk posture and compliance status to executive leadership and the board.
Develop, implement, and maintain policies and procedures to address risks and compliance obligations.
Provide training and awareness programs to employees on GRC topics, fostering compliance and risk-conscious behavior.
Collaborate with senior management, legal, IT, and other departments to assess and manage risks effectively.
Bachelor’s or Master’s degree in Business Administration, Risk Management, Cybersecurity, Law, or a related field from a reputable university.
Minimum of 10 years of experience in governance, risk management, compliance.
Strong knowledge of GRC frameworks, industry standards, and regulatory requirements (e.g., ISO 27001, NIST, GDPR, SOX, HIPAA).
Relevant certifications such as CISM, CRISC, CISA, or similar GRC certifications are highly preferred.
Proven track record of successful full leadership.