Governance Risk & Compliance Manager

Governance Risk & Compliance Manager

The Manager for Governance Risk and Compliance will lead and strengthen Boyd Gaming programs that support enterprise risk management with an emphasis on technology risk, third party risk, policy governance, policy exception oversight, and issue management. The role ensures that risks are identified, evaluated, communicated, and appropriately addressed across the organization. The manager will collaborate with technology and business teams to maintain alignment with internal expectations and external regulatory requirements while supporting broader GRC functions when needed.

The position will prioritize the risk management, third party risk management, policy management, policy exceptions, and issue management responsibilities listed below, while still supporting all GRC areas based on resource needs.

Risk Management :

• Serve as the primary subject matter expert for technology and cyber risks and advise stakeholders on effective risk identification, analysis, documentation, and treatment
• Lead enterprise technology risk assessments including annual and ongoing risk evaluation activities Maintain and improve the enterprise risk register including trend analysis, aggregation, remediation monitoring, and reporting for leadership
• Partner with technology teams to define appropriate risk responses and ensure adherence to the risk management process
• Evaluate the effectiveness of existing risk controls and recommend enhancements
• Support other risk related activities as needed Third Party Risk Management :
• Lead the assessment of risks related to vendors, contractors, service providers, and other external partners
• Evaluate third party security documentation including SOC reports and other independent validation reports
• Coordinate follow up with vendors and internal stakeholders on identified third party risks and required remediation
• Maintain third party risk records and provide reporting to technology and business leadership
• Support the integration of third-party risk management activities into procurement and contract processes

Policy Management :

Policy Exceptions :

Issue Management :

Security Governance :

Compliance :

Team Development :

Education :

Required skills / experience :

Boyd Gaming is proud to be an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state, or local protected class.