Manager, GRC Programs

Description

Corporate At ZOLL, we're passionate about improving patient outcomes and helping save lives. We provide innovative technologies that make a meaningful difference in people's lives. Our medical devices, software and related services are used worldwide to diagnose and treat patients suffering from serious cardiopulmonary and respiratory conditions.

Job Summary

The Manager of GRC Programs is responsible for leading the operational execution of the organization's Governance, Risk, and Compliance (GRC) programs. This role drives and leads the coordination and maturity of governance processes, security policy lifecycle management, and overall risk program operations (TPRM, ITRM). This position serves as the operational leader of GRC programs, ensuring consistent execution of security governance initiatives and alignment with regulatory frameworks, business objectives, and enterprise risk management practices.

Essential Functions

• **Governance & Policy Management**: Oversee the lifecycle management of enterprise security policies, standards, and procedures, ensuring alignment with regulatory requirements and security frameworks. Coordinate cross-functional policy development and review processes with stakeholders including IT, legal, compliance, and product security. Maintain governance documentation repositories, including policy libraries, control frameworks, and governance artifacts within the GRC libraries and platform. Support the Director of GRC in implementing governance frameworks aligned to industry standards such as ISO 27001, NIST, CIS, HIPAA, and GDPR. Manage policy exception workflows, ensuring risk acceptance and remediation activities are properly documented and tracked.
• **GRC Programs & Operations**: Lead operational execution of the organization’s GRC programs, libraries, and intranet content, ensuring consistent implementation of governance initiatives across security and IT teams. Administer and optimize GRC platforms (e.g., AuditBoard, ServiceNow) used for risk tracking, audit coordination, and control management. Establish scalable workflows for governance processes including risk intake, ex