Program Manager

GRC/IRM Program Manager

Lead end-to-end program and project management for GRC/IRM initiatives, ensuring alignment with compliance mandates, organizational risk posture, and strategic objectives.

Manage SOX controls, segregation of duties (SoD), and internal audit remediation programs, coordinating across IT, Finance, Legal, and Risk teams. Oversee project execution including planning, resource allocation, risk management, and timely delivery within budget constraints.

Build and maintain strong relationships with senior stakeholders (VP/SVP level) across compliance, risk, legal, and technology functions.

Conduct comprehensive risk assessments and develop mitigation plans to minimize impact on compliance posture and project objectives.

Drive cross-functional team accountability, ensuring adherence to controls, quality standards, and regulatory deliverables. Proactively communicate program status, risks, and mitigation strategies to executive stakeholders.

Support change management activities and ensure successful adoption of compliance and risk management solutions.

Apply Agile or hybrid delivery methodologies as appropriate to the compliance and risk program context.

Required Skills Proven experience leading IT programs in GRC, IRM, compliance, or risk management domains.

Strong understanding of SOX controls, segregation of duties (SoD), IT General Controls (ITGCs), and regulatory compliance frameworks.

Ability to manage large-scale, cross-functional compliance programs with multiple concurrent workstreams.

Expertise in risk assessment, issue tracking, mitigation planning, and audit readiness.

Excellent stakeholder management, executive communication, and negotiation skills.

Strong problem-solving, conflict resolution, and cross-functional collaboration skills. Familiarity with GRC platforms (e.g., ServiceNow IRM, Archer, or similar) is a plus.

Required Qualifications Minimum 8+ years of experience in IT program/project management, with at least 4 years focused on compliance, risk, or GRC programs in an enterprise environment.

Demonstrated experience managing SOX compliance programs, IT risk assessments, or regulatory audit programs end to end.

Proven track record delivering programs that involve controls remediation, SoD conflict resolution, or risk framework implementation.

Strong knowledge of project management tools (e.g., JIRA, Confluence, ServiceNow, Microsoft Project).

Experience managing budgets, timelines, and resource allocation for enterprise compliance programs.

Excellent leadership, executive communication, and stakeholder management skills.

Skills PMP, CISA, CRISC, or Agile certifications like SAFe Program Consultant (SPC) Experience with Agile methodologies (Scrum, SAFe) and facilitating Agile ceremonies in a compliance or enterprise IT context.

Experience with GRC platforms such as ServiceNow IRM, Archer, or similar tools. Familiarity with finance-related technologies or ERP systems (e.g., SAP, Oracle) from a controls perspective.

Experience in large-scale digital transformation initiatives with a compliance or risk component.

Familiarity with enterprise tools: ServiceNow, Cribl, Data Lakes, ITSM/ITOM/ITAM/IRM modules.