Lead IT GRC Analyst (Policy Management)

Location: Fully remote from a non-hirify.global worksite, most commonly the employee's residence; the posting is associated with New York, United States. An in-person interview at an hirify.global location may be required before hiring.

Salary: $110,000–$140,000 yearly, bonus eligible.

Company

hirify.global is a media and entertainment company producing and distributing film, television, streaming, news, sports, and theme-park content and experiences.

What you will do

• Lead the operational execution, integration, and continuous improvement of the Cyber Governance & Controls function.
• Manage governance procedures, playbooks, lifecycle schedules, policy forums, steering decisions, action tracking, RACIs, decision rights, evidence expectations, and exception paths.
• Operate the lifecycle of cyber policies, standards, configuration baselines, procedures, guidance, control mappings, and Cybersecurity Risk Acceptance Memoranda.
• Maintain service catalogs, intake and prioritization practices, governance metrics, scorecards, dashboards, executive updates, and quarterly operating reviews.
• Support governance transformation across AI, identity, attack surface, data protection, infrastructure, resilience, and third-party risk programs.
• Coordinate stakeholders across Cybersecurity, Operations & Technology, Legal, Privacy, Audit, Procurement, and business functions while supporting adoption and organizational change.

Requirements

• At least 5 years of experience in governance, risk management, compliance, cybersecurity operations, business operations, service operations, or a related discipline.
• Bachelor's degree or equivalent relevant professional experience.
• Experience establishing and managing operating processes, governance frameworks, service management practices, or control environments.
• Experience developing executive reporting, scorecards, dashboards, and performance measures.
• Experience coordinating work across multiple stakeholders and functions in a complex organization.
• Exceptional written and verbal communication, facilitation, analytical, and organizational skills, including the ability to explain complex governance and cybersecurity topics clearly.

Nice to have

• Experience in Governance, Risk and Compliance, cybersecurity, audit, third-party risk, or enterprise risk.
• Knowledge of governance frameworks, controls management, policy management, and enterprise operating models.
• Experience with ServiceNow IRM, LogicGate, Archer, Jira, or comparable governance and workflow platforms.
• Familiarity with NIST, ISO 27001, PCI DSS, or CIS.
• Experience driving operational excellence, process improvement, stakeholder adoption, and organizational change.
• Understanding of AI governance, emerging AI risks, responsible AI, and integrating AI requirements into enterprise controls.
• Experience with cybersecurity governance operating models, policy and baseline lifecycle management, risk acceptance and exception governance, service catalogs, control libraries, third-party security, data protection, GRC automation, audit interpretation, and executive communications.

Culture & Benefits

• Fully remote position performed from a non-hirify.global worksite.
• Medical, dental, and vision insurance; 401(k); paid leave; tuition reimbursement; discounts; and other company-sponsored benefits.
• Work in a highly matrixed environment requiring collaboration, self-direction, accuracy, and management of competing priorities.

Hiring process

• External candidates may be required to attend an in-person interview with an hirify.global employee at one of its locations before a hiring decision.
• Qualified individuals with disabilities or disabled veterans may request reasonable accommodation during the application process.