Governance, Risk, and Compliance (GRC) Manager

Job Description: DXC Technology is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates. DXC's Insurance Software and BPS (ISB) helps insurers around the world modernize and run their core operations at scale by combining deep industry expertise, proven software platforms, and innovative AI-driven solutions. A global market leader in core insurance platforms, ISB delivers solutions across policy administration, claims, billing, analytics, and digital engagement supporting Life & Annuity, Property & Casualty, and Specialty insurance markets. You’ll directly shape how the world's leading insurers operate by helping to transform the policy, underwriting, and claims systems that millions of people rely on every day. We are seeking an experienced Governance, Risk, and Compliance (GRC) Manager to lead cybersecurity governance, risk management, policy compliance, and audit readiness across enterprise technology environments. This role is responsible for developing and maintaining security policies, overseeing risk assessment and mitigation activities, coordinating compliance initiatives, and ensuring that security controls align with applicable regulatory requirements, industry standards, and business objectives. The ideal candidate has a strong background in cybersecurity, risk management, and policy compliance or audit within the financial services sector . The candidate should understand regulatory environments, security control frameworks, enterprise risk management practices, and the importance of maintaining effective governance and audit processes. Experience in the insurance industry or familiarity with any specific organization's internal policies, tools, or compliance processes is not required. This position will collaborate with cybersecurity, engineering, infrastructure, development, and business teams to identify and manage risks, strengthen security controls, support audit activities, and drive continuous improvement in the organization's security and compliance posture. The GRC Manager will also provide oversight for third-party risk management, business continuity and disaster recovery governance, risk reporting, and personnel assigned to the GRC function. Key Responsibilities Develop, maintain, and oversee cybersecurity policies, standards, and procedures to support regulatory compliance, security governance, and organizational risk management objectives. Lead risk assessments across applications, cloud environments, infrastructure, software development processes, and third-party integrations to identify, evaluate, prioritize, and mitigate cybersecurity and operational risks. Manage policy compliance and audit readiness activities, including evidence collection, control assessments, internal and external audits, customer security assessments, and regulatory examinations. Evaluate the effectiveness of cybersecurity controls and work with technical and business teams to address control gaps, policy exceptions, and identified compliance deficiencies. Partner with cybersecurity, engineering, infrastructure, and development teams to ensure security controls are implemented, documented, and auditable throughout the software development lifecycle (SDLC) and across technology environments. Oversee third-party risk management processes, including vendor security assessments, review of security requirements, identification of supply chain risks, and ongoing monitoring of critical technology providers. Establish and maintain processes for tracking risk remediation, compliance findings, control deficiencies, policy exceptions, and formal risk acceptance. Support governance forums, risk committees, and architecture review meetings to evaluate new technologies, system integrations, and significant technology changes from a security and risk perspective. Oversee business continuity and disaster recovery governance, including testing, tabletop exercises, documentation, and remediation of identified gaps. Prepare and present risk and compliance reports for executive leadership and business stakeholders, including risk indicators, audit status, remediation progress, policy compliance, and overall cybersecurity posture. Monitor emerging cybersecurity threats, regulatory developments, and changes in industry standards, assessing their potential impact on organizational policies, controls, and risk management practices. Identify opportunities to improve security governance, streamline compliance activities, strengthen internal controls, and enhance the effectiveness of risk management processes. Collaborate with stakeholders to establish clear accountability and timelines for resolving identified risks and compliance issues. Supervise, develop, and lead personnel assigned to the GRC function, establishing priorities, performance expectations, and opportunities for professional development. Required Qualifications Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business Administration, or a related discipline. 7+ years of experience in cybersecurity, risk management, governance, regulatory compliance, IT audit, or a related field. 3+ years of experience in GRC, cybersecurity risk management, policy compliance, or audit-related responsibilities. Experience in cybersecurity, risk management, and policy compliance or audit within the financial services sector. Strong understanding of cybersecurity principles, security controls, enterprise risk management, and compliance practices. Experience developing, implementing, revi