Job Title : Governance, Risk & Compliance (GRC) Experts
Location : Philadelphia, PA - Pittsburgh, PA - Chicago, IL - Dallas, TX
We are seeking a highly skilled Governance, Risk & Compliance (GRC) Expert to develop, implement, and maintain an integrated GRC framework. The ideal candidate will be responsible for identifying risks, ensuring regulatory compliance, and aligning risk management strategies with business objectives. You will work cross-functionally to support internal controls, risk assessments, audit processes, and compliance initiatives.
Key Responsibilities :
Develop and maintain corporate governance policies and procedures.
Collaborate with leadership to ensure alignment between business goals and regulatory requirements.Lead the GRC program development and reporting.Risk Management :Conduct enterprise risk assessments and maintain risk registers.
Identify, assess, and monitor operational, financial, regulatory, and reputational risks.Recommend and implement risk mitigation strategies and controls.Support third-party / vendor risk management processes.Compliance :Monitor and interpret regulatory and legal requirements applicable to the organization.
Ensure adherence to industry standards (e.g., ISO 27001, NIST, SOX, GDPR, HIPAA).Develop and deliver compliance training and awareness programs.Coordinate internal and external audits, and manage remediation plans.Reporting & Documentation :Prepare risk and compliance reports for senior management and the board.
Document policies, procedures, and control frameworks.Track key risk indicators (KRIs) and compliance metrics.Required Qualifications :
Bachelor's degree in Risk Management, Business Administration, Information Security, or a related field.Minimum 5 years of experience in GRC, audit, risk management, or compliance roles.Strong knowledge of GRC tools and frameworks (e.g., Archer, ServiceNow GRC, MetricStream).Experience with regulatory environments such as SOX, PCI DSS, GDPR, or HIPAA.Familiarity with ISO 31000, ISO 27001, COSO, COBIT, or NIST frameworks.Preferred Qualifications :
Certifications such as CRISC, CISA, CISM, CISSP, or ISO 27001 Lead Implementer / Auditor.Experience in highly regulated industries (e.g., financial services, healthcare, or technology).Excellent analytical, problem-solving, and communication skills.Ability to manage cross-functional teams and influence stakeholders.