Director, GRC
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Director, GRC scaling enterprise governance, risk, and compliance for Nextpower’s utility-scale solar technology platform. Leading ISO 27001 programs, audits, controls, and cross-functional certification efforts.
Responsibilities:
- Lead and scale Nextpower’s enterprise GRC program
- Develop a scalable GRC operating model covering governance, risk management, compliance, policy management, audit readiness, evidence management, and corrective actions
- Define program governance, decision-making structures, steering committees, control ownership, and executive reporting
- Develop and maintain program plans, budgets, resource requirements, milestones, dependencies, and risk registers
- Coordinate Cybersecurity, IT, Product, Engineering, Quality, Legal, Procurement, Human Resources, Internal Audit, and executive leadership
- Manage external implementation partners, auditors, and certification bodies
- Establish metrics and reporting on compliance status, program health, organizational risk, and remediation progress
- Translate regulatory and certification requirements into practical operating processes
- Ensure governance and compliance processes remain sustainable after initial certification
Requirements:
- Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, Business, Risk Management, or a related field
- Ten or more years of progressive experience in governance, risk and compliance, information security, audit, enterprise risk management, or a related discipline
- Five or more years of experience leading complex, cross-functional security, compliance, audit, or certification programs
- Demonstrated experience leading an ISO 27001 implementation, certification, or ongoing ISMS program
- Strong understanding of information security risk assessment, control design, control testing, audit readiness, corrective actions, and continual improvement
- Experience working with external auditors, assessors, certification bodies, or regulators
- Experience developing and governing cybersecurity policies, standards, procedures, and control frameworks
- Strong program and project management skills, including experience managing schedules, budgets, dependencies, risks, and executive reporting
- Excellent written and verbal communication skills, including the ability to present complex risk and compliance matters to executive and non-technical audiences
- Demonstrated ability to influence stakeholders and drive accountability without direct reporting authority
- Ability to operate independently, manage competing priorities, and deliver results in a fast-paced, global environment
- Preferred: Experience with IEC 62443-4-1, IEC 62443-4-2, industrial control systems, operational technology, or product security
- Preferred: Experience with the EU Cyber Resilience Act or other product cybersecurity regulations
- Preferred: Experience establishing or operating a secure development lifecycle
- Preferred: Experience in renewable energy, manufacturing, industrial technology, critical infrastructure, hardware, embedded systems, or software products
- Preferred: Experience with third-party risk management and supplier assurance programs
- Preferred: Experience with GRC or compliance automation platforms such as Drata, Vanta, ServiceNow GRC, Archer, OneTrust, or similar tools
- Preferred: Familiarity with NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, ISO 31000, or COBIT
- Preferred: Professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor
- Preferred: Master’s degree in a relevant field
Benefits:
- Equal opportunity employer
- Inclusive work environment committed to diversity
Similar Jobs
MLRO/Compliance Officer
Compliance Officer leading multi-state U.S. money transmitter licensing and AML/BSA programs. Supporting Mercuryo’s crypto and Web3 financial platform through regulator engagement and scalable compliance operations.
Senior Regulatory Strategist, Advertising & Promotion
Senior Regulatory Strategist guiding FDA advertising and promotion compliance at Parexel, a global clinical research organization. Advising commercial, medical, legal, and clinical stakeholders on regulatory strategy.
Senior Advisor, Compliance – PCG Branch Exams
Senior Compliance Advisor conducting risk-based branch examinations across U.S. brokerage offices. Reviewing compliance systems, documenting findings, and escalating emerging risks for Raymond James financial services.
Compliance & Contract Manager
Compliance and Contract Manager for a global manufacturer of grinding, mixing, and dispersing systems. Managing commercial agreements, enterprise risks, compliance programs, audits, and regulatory requirements.
Senior FIFRA Regulatory Affairs Manager
Senior FIFRA regulatory manager guiding U.S. pesticide and biological registrations for knoell’s global regulatory services business. Advising clients on data, labeling, and regulatory strategy.
Compliance & Contract Manager
Compliance and Contract Manager overseeing contracts, risk, and global compliance for a manufacturer of industrial grinding and dispersing technology. Advising business stakeholders and executive management.
Regulatory Analyst Intern – 8-Month Fixed-Term Contract
Regulatory Analyst Intern translating European climate policy into market guidance and trading opportunities. Supporting Targray’s environmental commodities business through regulatory analysis, credit modeling, and data tools.
Manager, Compliance – Dangerous Goods
Compliance manager overseeing lithium battery logistics for DSV’s global transport network. Ensuring dangerous-goods compliance across air, ocean, road transport, and warehouse operations.
Compliance Oversight Specialist – Non Clinical
Compliance Oversight Specialist monitoring WellCare’s managed-care contracts and regulatory programs for Centene, a healthcare solutions provider. Conducting audits, risk assessments, remediation, and corrective-action follow-up across markets and delegated subcontractors.
Head of Compliance
Head of Compliance building healthcare, clinical, government-program, and security compliance for Chamber’s cardiology platform. Creating audits, controls, and risk frameworks as the company expands.
Principal Clinical Trial Regulatory Affairs
Principal Regulatory Affairs specialist leading complex clinical-trial submissions for Syneos Health, a global biopharmaceutical services organization. Managing regulatory strategy, dossiers, compliance, budgets, and client relationships across study lifecycles.
Senior Director, Regulatory Affairs – Advertising & Promotion
Senior Director guiding FDA promotional compliance for Summit Therapeutics, a biopharmaceutical oncology company. Reviewing promotional materials, leading regulatory strategy, and coordinating with FDA and cross-functional stakeholders.
Regulatory Manager
Regulatory Manager guiding clinical-trial submissions for Precision for Medicine. Advising project teams on regulatory strategy, compliance, and drug-development approvals.
Federal Legislative & Regulatory Affairs Director
Federal energy regulatory director leading FERC, PJM, and wholesale-market advocacy for IGS Energy, an energy retailer serving U.S. and Canadian homes and businesses.
Director, Regulatory Change Initiatives
Regulatory change director advancing compliance initiatives for CrossCountry Mortgage, a nationwide distributed retail mortgage lender. Translating regulatory assessments into system, process, control, and documentation improvements.
Senior Contract & Compliance Specialist
Senior contracts specialist managing complex U.S. healthcare, technology, vendor, and government agreements for Gainwell Technologies. Negotiating contracts, mitigating risk, and driving enterprise compliance from India.
Compliance Analyst
Compliance Analyst auditing auto-finance processes for Auto Approve, a fintech company helping customers save on vehicle loans. Documenting controls, testing compliance, and recommending improvements.
Regulatory Specialist – Level 2
Regulatory Specialist guiding global medical-device submissions, labeling, and quality-system compliance. Supporting product teams, audits, corrective actions, and regulatory agency relationships.
Chief Compliance Officer
Chief Compliance Officer leading PayFac compliance for Finalsite, a K–12 EdTech platform serving 7,000+ schools. Building global risk, ethics, payments, and regulatory infrastructure.
Compliance Specialist
Amazon US compliance specialist managing certifications, testing, and marketplace cases for Sound Around’s e-commerce consumer brands. Coordinating suppliers, laboratories, and product approvals across Amazon Vendor and Seller Central.