Vice President, IT Governance, Risk & Compliance

About this role

Summary We are seeking an experienced, forward-thinking Vice President of IT Governance, Risk & Compliance (IT GRC) to lead and transform the enterprise IT GRC function. This executive leader will be responsible for establishing and advancing a modern, technology-enabled governance, risk, compliance, and regulatory response program that supports the company mission, protects customers, and enables business growth.

This role requires an exceptional leader who can operate at the intersection of cybersecurity, technology, risk management, audit, regulation, and business strategy. The successful candidate will possess deep knowledge of cybersecurity and technology risks, extensive experience within highly regulated industries, and a demonstrated ability to build scalable programs leveraging automation, data intelligence, continuous assurance, and artificial intelligence.

The Vice President will serve as a trusted advisor to executive leadership, regulators, auditors, and business stakeholders while driving a culture of accountability, transparency, and risk-informed decision making across the enterprise.

Primary Duties & Responsibilities Strategic Leadership • Develop and execute a multi-year vision and strategy for the IT GRC organization aligned with enterprise objectives, technology strategy, and cybersecurity priorities.

• Transform traditional compliance and risk management practices into a modern, data-driven operating model emphasizing automation, scalability, and continuous monitoring.

• Build a high-performing organization that attracts, develops, and retains top talent across governance, compliance, risk management, and regulatory disciplines.

• Partner closely with Cybersecurity, Technology, Enterprise Risk Management, Internal Audit, Legal, Privacy, and business leadership to ensure integrated risk management across the enterprise.

Governance & Risk Management • Oversee enterprise IT governance frameworks, policies, standards, controls, and risk management processes.

• Ensure effective identification, assessment, measurement, monitoring, and reporting of technology and cybersecurity risks.

• Drive maturation of risk management capabilities through improved metrics, analytics, and automation.

• Develop meaningful executive and board-level reporting that translates technical risks into business and financial impacts.

Regulatory Compliance & Audit • Lead compliance efforts related to applicable technology and cybersecurity regulations and standards.

• Maintain readiness for regulatory examinations and external reviews.

• Serve as the primary executive sponsor for technology and cybersecurity audits, examinations, and regulatory engagements.

• Establish sustainable and defensible compliance practices that withstand both regulatory and audit scrutiny.

• Drive remediation of audit findings and regulatory concerns through risk-based prioritization and measurable outcomes.

Technology & Cybersecurity Leadership • Provide strategic oversight for technology and cybersecurity governance programs.

• Partner with cybersecurity leadership to assess and manage emerging threats, control effectiveness, security maturity, and operational risk.

• Apply practical cybersecurity experience to improve governance and risk outcomes rather than relying solely on theoretical compliance models.

• Maintain awareness of evolving threat landscapes, technology trends, cloud risks, AI-related risks, and cybersecurity regulations.

Modernization, Automation & AI • Champion modernization of IT GRC practices through automation, workflow orchestration, advanced analytics, and data-driven decision making.

• Lead the adoption of continuous assurance capabilities that reduce manual evidence collection and repetitive compliance activities.

• Drive elimination of duplicate processes and fragmented controls across governance, risk, and compliance programs.

• Establish governance frameworks and oversight mechanisms for emerging AI technologies and AI-enabled business processes.

• Foster a culture that embraces innovation while maintaining appropriate risk management and regulatory compliance.

Executive & Board Engagement • Serve as a trusted advisor to the CISO, CIO, executive leadership team, and governance committees.

• Deliver concise, compelling, and actionable briefings to senior executives, board committees, auditors, and regulators.

• Translate complex technical, cyber, and regulatory issues into language appropriate for executive and board audiences.

• Build strong relationships across the organization to influence decision making and achieve strategic outcomes.

Qualifications Required Qualifications • A cybersecurity leader who understands governance and compliance, not simply a compliance leader who understands regulations.

• A technology strategist who understands how platforms, integrations, automation, and AI enable scalable risk management.

• 15+ years of progressive leadership experience across IT governance, risk management, compliance, audit, cybersecurity, or technology management.

• Demonstrated experience leading large-scale enterprise programs within a highly regulated environment.

• Strong understanding of information technology, cybersecurity architectures, cloud technologies, identity and access management, data protection, and technology operations.

• Extensive experience managing regulatory compliance programs and interactions with internal and external auditors.

• Proven experience presenting to executive leadership teams, board committees, regulators, and auditors.

• Demonstrated success developing enterprise-wide governance, risk, compliance, or cybersecurity programs.

• Exceptional executive communication, influencing, and relationship management skills.

Preferred Qualifications • Experience within the insurance industry strongly preferred.

• Experience within financial services, banking, wealth management, or other highly regulated industries.

• Prior lea

Similar jobs

• Senior Director, IT Governance, Risk and Compliance — Wwecorp · Remote
• Vice President, Information Security - Identity, Governance, and Cyber Risk — P&G · CINCINNATI GENERAL OFFICES
• Vice President, Technology Risk & Controls — Blackrock · Wilmington, DE
• Manager, IT Governance, Risk and Compliance — Wwecorp · Remote
• Vice President, Information Technology — Compass Surgical Partners · Remote
• IT Governance, Risk & Compliance Manager — Alkegen · Tonawanda (CHQ), United States | Buffalo, NY
• Vice President, Information Security — Springhealth66 · Remote
• Manager, IT Risk Governance & Assessment — Toyota · Plano, Texas