GRC Architect

Job Description

We are seeking a skilled GRC (Governance, Risk, and Compliance) Architect to develop and implement governance workflows for risk management. You will collaborate with cross-functional teams to establish risk management processes and ensure audit readiness. Key responsibilities: 1. Design enterprise risk register frameworks. 2. Engineer end-to-end governance workflows for risk identification, intake, validation, and mitigation. 3. Establish clear roles and responsibilities for risk owners and reviewers. 4. Design escalation processes for high-priority and accepted risks. 5. Partner with Business, Technology, Security, and Audit functions to validate risk requirements. 6. Lead workshops to train stakeholders on governance processes. 7. Support the migration of risks into the enterprise register. 8. Produce high-quality documentation. 9. Conduct training to ensure framework sustainability. Professional Deliverables: * Standardized enterprise risk register template and taxonomy. * Documented risk scoring and prioritization model. * Operational governance model with defined workflows and responsibilities. * Baseline register reflecting current cybersecurity and tech risk posture. * Consolidated guidance for ongoing risk management.

Qualifications

Key requirements: 1. 8+ years of experience in Risk Register Design and Framework development. 2. 8+ years of experience creating Risk Scoring and Prioritization Models. 3. 8+ years of experience defining Governance Processes and Workflows. 4. 8+ years of experience in Stakeholder Management and Enablement. 5. 8+ years of expertise in technical writing and audit-ready documentation. 6. Professional certifications such as CRISC, CISM, CISSP, or CGEIT. 7. Deep understanding of industry frameworks like NIST 800-30, ISO 31000, and COBIT. 8. Experience with GRC tool implementation such as ServiceNow, Archer, and OneTrust.

Benefits

Employee benefits: - Health insurance - Retirement plans - Paid time off - Flexible work arrangements - Professional development