• Lead end-to-end planning and execution of complex, multi-year GRC programs • Architect and maintain a unified control framework • Own roadmap and operating cadence for key GRC initiatives • Drive cross-functional alignment among IT, InfoSec, R&D, Legal, Privacy, HR, Facilities and Security stakeholders • Ensure controls are embedded into systems, processes, and services • Lead oversight for internal and external audit planning, evidence collection, and remediation tracking • Design and improve processes for risk identification, assessment, treatment, and reporting • Define and monitor meaningful KPIs for security and compliance programs • Lead process improvement and automation initiatives