Vice President, Governance, Risk & Compliance

Job Description:

The Vice President, Governance, Risk & Compliance (GRC) is responsible for establishing, implementing and maturing an enterprise-wide GRC program across a complex, multi-program organization. This executive leader develops the GRC strategy and roadmap, creates sustainable governance structures, standardizes risk and compliance practices, and provides leadership and the Board with clear visibility into significant risks, mitigation activities and compliance performance.

The Vice President serves as the central coordinator and transformation leader for GRC, moving the organization from decentralized and siloed compliance routines to an integrated, risk-based operating model. The role partners closely with executive leadership, program operations, Legal, Finance, Human Resources, Information Technology, Quality and other stakeholders to strengthen accountability, transparency and a culture of risk awareness.

Qualifications:

- Bachelor’s Degree in Business Administration, Healthcare Administration, Risk Management, Law, Finance, Accounting, Public Administration, Compliance or a Related Field, required.
- Master’s Degree in Business Administration, Healthcare Administration, Law, Public Administration, or a Related Field, preferred.
- At least 10 years of progressively responsible experience in compliance, enterprise risk management, governance, audit, quality, legal, privacy or a related discipline, including significant leadership responsibility, required.
- Demonstrated experience designing, implementing or materially maturing an enterprise GRC or enterprise risk management program, required.
- Experience leading cross-functional transformation in a complex or highly regulated organization, required.
- Strong knowledge of governance practices, risk assessment, compliance program management, internal controls, monitoring, investigations, audits and corrective action management, required.
- Demonstrated ability to communicate effectively with executive leadership, governing boards, regulators and operational stakeholders, required.
- Demonstrated experience using data, dashboards, metrics, and technology-enabled solutions to monitor enterprise risks, identify trends, and support executive and Board decision-making. Working knowledge of the COSO Enterprise Risk Management Framework and ability to translate complex regulatory and risk concepts into clear priorities and practical operating requirements, required.
- Experience in healthcare, behavioral health human services, nonprofit services, government-funded programs or another highly regulated environment, preferred.
- Professional certification such as CCEP, CHC, CRISC, CGEIT, CISA, CIA, CRM, CRMA, CHIAP, or RIMS-CRMP, preferred.
- Familiarity with information technology, cybersecurity, data governance, and privacy risk sufficient to incorporate technology-related risks into the enterprise risk management and reporting process, preferred.
- Experience selecting, implementing or optimizing GRC technology and reporting capabilities, including, but not limited to, demonstrated experience using the COSO ERM Framework, preferred.
- Experience with regulatory, accreditation and contractual requirements across multiple business or service lines, including HIPAA where applicable to programs and services, preferred.
- Valid driver’s license and reliable transportation.

Essential Responsibilities:

- Enterprise Governance Establish and maintain the enterprise GRC framework, governance model and multi-year maturity roadmap.
- Define decision rights, roles, accountabilities, committee structures, charters and escalation paths.
- Create consistent policies, standards and operating practices for governance, risk and compliance activities.
- Facilitate enterprise governance forums and coordinate executive and Board-level oversight activities.
- Promote alignment among organizational strategy, regulatory obligations, risk appetite and operational priorities.

- Enterprise Risk Management Design and implement a formal enterprise risk management program using a recognized risk management framework.
- Establish consistent methods for risk identification, assessment, prioritization, response, monitoring and reporting.
- Lead recurring enterprise and program-level risk assessments and maintain an enterprise risk register.
- Partner with risk owners to develop mitigation plans, assign accountability, establish target dates and monitor progress.
- Develop risk appetite and tolerance recommendations for executive and Board review.
- Identify emerging and interconnected risks and communicate their potential organizational impact.

- Compliance Program Leadership Develop and oversee an integrated governance, risk and compliance program addressing applicable legal, regulatory, contractual, accreditation, privacy, ethical and internal policy requirements.
- Create an enterprise inventory of governance, risk and compliance obligations, accountable owners, monitoring activities and reporting requirements.
- Standardize governance, risk and compliance assessments, monitoring routines, documentation and evidence requirements across programs.
- Coordinate regulatory examinations, external audits, accreditation reviews and organizational responses, as appropriate.
- Oversee corrective action planning, issue escalation and remediation tracking.
- Monitor relevant regulatory and industry developments and coordinate assessment of organizational impact.

- Strategic Roadmap Execution Translate the GRC strategy into a prioritized implementation plan with defined workstreams, milestones, owners, dependencies and measures of success.
- Lead cross-functional teams responsible for executing roadmap initiatives.
- Balance regulatory urgency, organizational risk, operational capacity and change readiness when sequencing initiatives.
- Report roadmap status, accomplishments, constraints and decisions needed to executive leadership and governing bodies.
- Continuously assess GRC maturity and recommend adjustments to the roadmap.

- Monitoring, Controls and Assurance Establish ongoing monitoring, control testing and assurance activities proportionate to risk.
- Develop key risk indicators, key control indicators and compliance performance measures.
- Create centralized processes for issue management, corrective actions, exceptions and risk acceptance.
- Ensure findings and actions are documented, assigned, tracked, validated and closed in a timely manner.
- Develop dashboards that provide clear, decision-oriented visibility into risk, compliance status and remediation progress.

- Culture, Education and Change Leadership Build a practical, risk-aware culture that reinforces ethical conduct, accountability and timely escalation.
- Develop role-based GRC education, communications and awareness activities.
- Coach leaders and risk owners on governance responsibilities, compliance accountability and effective risk response.
- Facilitate collaboration across programs while respecting operational differences and regulatory requirements.
- Lead organizational change needed to transition from independent compliance routines to an integrated enterprise model.

- Executive and Board Reporting Prepare concise enterprise risk and compliance reports for executive leadership and Board committees.
- Present significant and emerging risks, compliance trends, mitigation status and GRC maturity progress.
- Provide objective, practical recommendations to improve governance, strengthen controls and reduce organizational risk.
- Support leadership in evaluating risk-informed strategic and operational decisions.

- Leadership Responsibilities Provide executive leadership for the GRC function and establish a clear service and accountability model.
- Build effective partnerships with program and functional leaders throughout the organization.
- Develop internal GRC capabilities and determine where specialized external support is appropriate.
- Model sound judgment, discretion, integrity, collaboration and constructive challenge.
- May lead employees, contractors or matrixed teams based on the approved organizational structure.

Hours:   Full time, Monday – Friday

Compensation:   TBD

What’s in it for you? We offer a comprehensive benefits package for full-time, eligible employees, including:

- Medical, Dental, Vision, Life & Disability
- PTO begins accruing on your first day!
- Up to 9 paid holidays annually, plus one floating holiday of your choice. For programs that remain open during holidays, staff scheduled to work will receive holiday pay in accordance with program guidelines.
- 403(b) employer match up to a maximum of 3%
- Tuition reimbursement after one year of employment
- Student loan repayment for qualifying degrees after one year of employment
- Wellness programs: nutritional counseling services, reimbursement programs for weight loss & tobacco cessation

We are proud to be a recovery-friendly workplace and a NH Veteran-Friendly Business.

To learn more about this role, please click on the blue “Apply Now” button below to submit your application. Have questions about the role? Schedule time to chat with our Talent Acquisition Specialist, Bill: www.calendly.com/eastersealsnh-bill/30min

Difficulty submitting your application or scheduling time to chat? Contact

Bill at 603.670.6817 or email [email protected]

EOE