- Lead the design and execution of the organization’s GRC strategy, ensuring it aligns with corporate goals and objectives.
- Develop and implement governance frameworks, risk management processes, and compliance programs that adhere to regulatory requirements and industry standards.
- Oversee the risk management process, including risk identification, assessment, mitigation, and monitoring.
- Ensure compliance with relevant laws, regulations, and internal policies, including data protection, cybersecurity, financial, and operational regulations.
- Establish and maintain a strong risk management and compliance culture throughout the organization.
- Provide leadership and guidance to cross-functional teams to ensure effective implementation of GRC initiatives.
- Lead internal and external audits, managing the process and ensuring timely remediation of identified issues.
- Monitor and report on the organization’s risk posture and compliance status to executive leadership and the board.
- Develop, implement, and maintain policies and procedures to address risks and compliance obligations.
- Provide training and awareness programs to employees on GRC topics, fostering compliance and risk-conscious behavior.
|