Role Summary/Purpose:

The VP, Cloud Control Framework Governance Leader is responsible for leading the development, implementation, and on-going management of Governance, Risk, and Compliance (GRC) and Integrated Risk Management (IRM) processes using the ServiceNow platform. This role will focus on technology-related risks and controls in public cloud environments. Leveraging influence and collaboration, this role will work closely with various stakeholders to ensure that the organization’s risk and compliance requirements are met efficiently and effectively. The role will require process-oriented leadership, cross-functional awareness, and a strong background in risk management, compliance, and audit in order to develop adaptable and scalable processes. 

Our Way of Working

We’re proud to offer you choice and flexibility. At Synchrony, our way of working allows you to have the option to work from home, near one of our Hubs or come into one of our offices. Occasionally you may be required to commute to our nearest office for in person engagement activities such as business or team meetings, training and culture events. 

Essential Responsibilities: 

• Define the implementation and optimization strategy for ServiceNow IRM, focusing on establishing a centralized governance framework and implementing continuous monitoring of compliance and risk indicators. 

• Oversight and integration of ServiceNow IRM with existing systems to drive efficiency. 

• Develop a ServiceNow IRM implementation roadmap that aligns with industry standards and organizational goals. 

• Utilize ServiceNow IRM to map controls to both external industry frameworks and internal policies, including cross-mapping controls to meet requirements across multiple regulatory frameworks (e.g., NIST CSF, CRI-CP, SOX, HIPAA, PCI) and integrating internal policies with external regulations, industry standards and best practices. 

• Evaluate ServiceNow IRM’s risk assessment capabilities to conduct automated risk assessments using both asset and process-centric methodologies. 

• Determine qualitative and quantitative risk scores informed by service performance data. 

• Collaboration with a small team of Governance professionals based in US and India to ensure proper implementation of cloud controls.  

• Provide technical leadership to the GRC development team, guiding them in implementing solutions. 

• Provide fact-based insights utilizing data visualization tools like Tableau to create insightful risk and compliance dashboards. 

• Champion adherence to internal requirements, regulatory requirements, and industry best practices. 

• Leadership of the end-to-end delivery of GRC projects, focusing on the design and implementation of security and compliance processes to support regulatory requirements and reduce organizational risk. 

• Develop and deliver training for internal users on how to use ServiceNow IRM and foster a risk management-oriented culture. 

• Perform other duties and/or special projects as assigned. 

Qualifications/Requirements:

• Minimum of 8+ years of experience in a technology governance or engineering role; OR in lieu of a degree, 12+ years of experience in technology governance roles.  

• 5+ years of experience implementing GRC/IRM functions. 

• 7+ years of experience in audit, compliance, or risk management with a proven track record of implementing GRC programs, process improvements, and platforms. 

• 3+ years of operating in a cloud environment, preferably AWS and/or Azure 

• Understanding of risks and controls in cloud environments including regulatory / compliance frameworks (e.g., NIST CSF v2.0, CRI-CP v2.0, COBIT2019, PCI v4.0) 

• Experience driving cross-functional collaboration. 

• Experience managing large complex GRC projects, including resource allocation, timeline management, and status reporting. 

• Experience demonstrating verbal and written communication skills to facilitate workshop sessions, collaborate across teams, and engage with stakeholders. 

• Ability to travel up to 10%   

Desired Characteristics: 

• In-depth experience with ServiceNow

• Strong background in developing and optimizing risk management and compliance processes. Proven ability to design workflows that support consistent application of security and compliance policies. 

• Agile implementation skills to review requirements, user stories, and testing.

• ServiceNow Certified Implementation Specialist – GRC/IRM 

• ServiceNow Certified Administrator – CSA 

• AWS (Cloud Practitioner, Associate Solutions Architect) 

• ISACA Certifications (CRISC, CISM, CISA) 

• ISC2 Certifications (CISSP) 

• Strong leadership and team management skills. 

• In-depth understanding of cloud governance and compliance principles. 

• Experience with policy development and enforcement. 

• Ability to work in a fast-paced, dynamic environment. 

• Strong analytical, problem-solving, and decision-making abilities. 

• Effective communication and collaboration skills. 

Grade/Level: 13

The salary range for this position is 130,000.00 - 210,000.00 USD Annual and is eligible for an annual bonus based on individual and company performance.

Actual compensation offered within the posted salary range will be based upon work experience, skill level or knowledge.

Salaries are adjusted according to market in CA, NY Metro and Seattle.