GRC Program Manager

ITC Infotech is looking for a GRC Program Manager to join our team in Dearborn, MI.

Location- Dearborn/ Detroit Michigan. This role would require you to be on premises 2-3 days a week.

What you’ll do:

• Develop, implement, and maintain the information security program, risk and control’s function.
• Collaborate and drive business and cyber risk program alignment across the enterprise, innovate and institute change to manage risk.
• Assist with the implementation and ongoing support for all security measures necessary to ensure Personally Identifiable Information (PII) is secure and all business requirements and applicable State and Federal regulations are met.
• Manage enterprise-wide data governance framework, with a focus on improvement of organizational policies and standards, principles, governance metrics, processes, related tools and data architecture.
• Plan, execute, and manage multiple projects to budget, completing audits and business process control reviews.
• Review and test company-wide IT Security & Controls processes to assess business risks, controls, and the overall effectiveness.
• Develop and execute project and vendor risk assessments, recommend risk mitigation techniques, and identify opportunities for security and control improvements.
• Maintain active communication with project teams and vendors, managing expectations and ensuring adherence to policies.
• Work with and support leadership and team members to achieve goals of the IT Security and Controls team.

Must Haves:

• Bachelor’s degree from a four-year college or university in Information Technology, Computer Science or related field.
• Master’s in information technology or related field is a plus.
• Over all 15 years of experience with Information security, privacy and information protection leadership experience (5 years).
• IT Security & Controls policy and compliance enforcement experience.
• Experience successfully scoping, planning and driving technology development projects.
• Experience creating and enforcing security policies for the Enterprise and our Suppliers.
• ISO information security experience is a plus.

ITC Infotech is an Equal Opportunity Employer. We believe that no one should be discriminated against because of their differences, such as age, disability, ethnicity, gender, gender identity and expression, religion, or sexual orientation. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. ITC infotech is committed to providing veteran employment opportunities to our service men and women.