Digital GRC Section Head

Digital Governance, Risk, and Compliance Leadership

As the **Digital GRC Section Head**, you will spearhead the implementation and oversight of robust **IT Governance, Risk, and Compliance (GRC)** frameworks across SANS’ digital platforms. This pivotal role ensures alignment with regulatory standards, mitigates enterprise-wide risks, and fosters a culture of accountability and proactive risk management. By embedding GRC best practices into core IT processes, you will drive operational excellence, enhance audit readiness, and deliver strategic insights to leadership—positioning SANS at the forefront of secure, compliant, and resilient digital operations.

Key Responsibilities

Your leadership will be instrumental in shaping SANS’ GRC strategy, ensuring alignment with evolving regulatory landscapes while optimizing risk mitigation and compliance efficiency. Key responsibilities include:

• Governance & Policy Leadership: Develop, refine, and enforce **enterprise-wide IT governance frameworks**, policies, and controls that align with industry standards, regulatory requirements (e.g., ISO, NCA, GDPR), and SANS’ operational objectives. Provide **data-driven reporting** to the Section Head on compliance status, policy adoption, and governance effectiveness.
• Enterprise Risk Management: Lead **comprehensive IT risk assessments**, maintaining a centralized risk register with clear ownership, prioritization, and remediation timelines. Collaborate with architecture, infrastructure, and security teams to address vulnerabilities proactively, ensuring risks are mitigated based on business impact. Cultivate a **risk-aware culture** through targeted training, awareness programs, and practical guidelines.
• Compliance & Audit Excellence: Oversee adherence to **multi-domain compliance frameworks**, ensuring digital platforms are audit-ready at all times. Conduct **control testing, gap assessments, and remediation planning**, while coordinating seamless responses to internal and external audits. Maintain robust **evidence repositories** to facilitate efficient compliance verification.
• Third-Party & Vendor Risk Governance: Assess and monitor **vendor GRC maturity**, embedding risk-based contractual clauses and compliance obligations. Leverage SLAs, certifications, and independent audits to ensure third-party vendors meet SANS’ stringent security and compliance standards.
• Performance & Continuous Improvement: Design and maintain **dynamic GRC dashboards** tracking risk posture, audit findings, remediation progress, and compliance metrics. Deliver **structured, actionable insights** to governance committees and leadership, driving data-informed decision-making. Continuously benchmark GRC practices against industry benchmarks, refining processes to enhance efficiency, cost-effectiveness, and productivity.
• Process Optimization & Policy Enforcement: Monitor daily operations to ensure adherence to established policies and procedures. Identify opportunities for **systemic improvements**, integrating best practices, cost reductions, and productivity enhancements while adapting to evolving business needs.
• People Development & Leadership: Foster a **high-performance culture** by mentoring, coaching, and training subordinates, aligning their development with SANS’ core values. Provide clear direction, prioritize critical initiatives, and delegate responsibilities effectively to drive team success.

Qualifications & Requirements

Candidates must demonstrate a **proven track record** in GRC leadership, combining technical expertise with strategic vision. Ideal candidates will possess:

• Experience & Expertise: Minimum **6 years of experience** in IT governance, risk management, compliance, or a related field, with a strong foundation in **enterprise risk assessment, audit readiness, and regulatory compliance**.
• Education & Certifications: A **bachelor’s degree** in Engineering, Computer Science, Information Technology, or an equivalent discipline. Preferred certifications include **audit/assurance (e.g., CISA, CRISC), risk management (e.g., FRM, ISO 31000), compliance frameworks (e.g., CIPP/E, CIPM), and internal control frameworks (e.g., COSO)**.
• Strategic Mindset: Ability to translate complex regulatory and business risks into actionable strategies, with a focus on **proactive risk mitigation and continuous improvement**.
• Stakeholder Engagement: Strong interpersonal and communication skills to collaborate with cross-functional teams, leadership, and external auditors while driving alignment on GRC priorities.

This role is ideal for a **visionary leader** who thrives in a dynamic, compliance-driven environment and is committed to elevating SANS’ digital governance standards through innovation, accountability, and operational excellence.