This individual reports to, and works closely with, the Deputy CISO and partners across the organization with Enterprise Risk Management, Internal Audit, Legal, Privacy, Compliance, Information Technology, and other business leaders to promote effective governance, strengthen risk management, and support the continuous improvement of the information security program. The Associate Director of Governance, Risk, and Compliance (GRC) is a resourceful and experienced information security leader responsible for managing, and continuously improving, the organization s information security GRC program.