About the role

Senior GRC Advisor providing advisory and oversight on governance, risk, and control activities for Data and AI. Collaborating with stakeholders to strengthen governance across the enterprise.

Responsibilities

Provides independent advisory, oversight, and validation of governance, risk, and control activities that support Enterprise Data Governance and AI Governance
Supports Product/Service/Process Risk Assessments (PSPRA) and Regulatory Compliance Risk Assessment (RCRA)
Maintains Process Risk and Control (PRC) libraries and advises on Key Risk Indicators (KRIs)
Works in close collaboration with First Line of Defense (1LOD) and Regulatory Compliance and Risk related Second Line of Defense (2LOD) partners
Maintains a strong understanding of applicable regulatory requirements, industry standards, and internal policy frameworks
Monitors changes and provides timely governance, risk, and control insights
Communicates governance, risk, and control considerations clearly to stakeholders, supporting informed decision-making and consistent application of expectations

5 - 7 years of relevant experience in governance, risk, compliance, data governance, AI governance, risk management, audit, or related disciplines
Strong knowledge of Data and AI governance risk and regulatory requirements, including data privacy, data quality, model risk, and emerging AI governance considerations
Solid understanding of applicable regulations, industry standards, and control frameworks relevant to enterprise risk management and the data and AI lifecycle
Experience supporting risk assessments (e.g., PSPRA, RCRA, process risk and control assessments), including advising on risk identification, control considerations, and Key Risk Indicators (KRIs)
Strong analytical and critical-thinking skills, with the ability to assess governance and control alignment, identify gaps, and articulate risk implications
Effective communication, collaboration, and stakeholder management skills, with the ability to influence across first- and second-line functions
Ability to work independently, exercise sound judgment, and appropriately escalate governance or risk concerns
Required professional certifications: CDMP - Certified Data Management Professional (by DAMA), CRISC - Certified in Risk and Information Systems Control (by ISACA) OR CGRC - Certified in Governance, Risk and Compliance (by ISC2)