Lead IT GRC Analyst (Policy Management)

The Lead IT GRC Analyst will lead the operational execution, integration, and continuous improvement of the Cyber Governance & Controls function. This role will support turning a broad portfolio of governance work including policies, standards, configuration baselines, Cybersecurity Risk Acceptance Memoranda, long-term governance models, control libraries, and governance advisory engagements into a coordinated, measurable enterprise service. The successful candidate will serve as the operational leader connecting Governance strategy to day-to-day execution. The role will partner across Cybersecurity, Operations & Technology, Legal, Privacy, Audit, Procurement, and various business stakeholders to establish clear ownership, decision rights, evidence, review cadences, exception paths, and sustainable control outcomes. This role enables delivery across eight connected service lines: policy and standards lifecycle management; security baselines and control governance; vendor security management; continuous third-party monitoring; GRC tooling and workflow automation; data protection governance; program governance advisory; and regulatory, audit, and standards interpretation. The position is differentiated from traditional project management by its accountability for the operating health, maturity, adoption, traceability, and effectiveness of Governance itself. Responsibilities Governance Operations Develop, implement, and continuously improve Governance operating procedure