GRC Architect
Posted 5hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Contract GRC Architect role focusing on Risk Management processes and governance frameworks. Collaborating cross-functionally to enhance risk management strategies in IT Services industry.
Responsibilities:
- Framework & Governance Design
- Workflow Engineering: Define end-to-end governance workflows for risk identification, intake, validation, and mitigation.
- Governance Structures: Establish clear roles and responsibilities (RACI) for risk owners, reviewers, and oversight bodies.
- Escalation Logic: Design formal reporting and escalation processes for high-priority and accepted risks.
- Stakeholder Engagement & Enablement
- Cross-Functional Collaboration: Partner with Business, Technology, Security, and Audit functions to validate risk requirements.
- Facilitation: Lead workshops to socialize the risk register and train stakeholders on new governance processes.
- Onboarding: Support the initial migration and population of critical risks into the enterprise register.
- Documentation & Sustainability
- Audit Readiness: Produce high-quality documentation covering data definitions, scoring logic, and decision authorities.
- Knowledge Transfer: Conduct formal training and handovers to internal security staff to ensure long-term framework sustainability.
- Professional Deliverables
- Enterprise Risk Register Framework: A standardized template and taxonomy.
- Risk Scoring & Prioritization Model: Documented likelihood/impact scales and prioritization logic.
- Operational Governance Model: Defined intake workflows and a roles/responsibilities matrix.
- Initial Risk Population: A baseline register reflecting current cybersecurity and tech risk posture.
- Final Operating Procedures: Consolidated guidance for ongoing, business-as-usual risk management.
Requirements:
- 8+ Years of direct experience in Risk Register Design and Framework development
- 8+ Years of experience creating Risk Scoring and Prioritization Models
- 8+ Years of experience defining Governance Processes and Workflows
- 8+ Years of experience in Stakeholder Management and Enablement
- 8+ Years of demonstrated expertise in technical writing, audit-ready documentation , and knowledge transfer.
- Professional certifications such as CRISC, CISM, CISSP, or CGEIT.
- Deep understanding of industry frameworks (e.g., NIST 800-30, ISO 31000, COBIT).
- Experience with GRC tool implementation (e.g., ServiceNow, Archer, OneTrust).
Benefits:
- Health insurance
- Retirement plans
- Paid time off
- Flexible work arrangements
- Professional development

















