Project Manager GRC

Insight Global is looking for a for a highly organized, detail-oriented, and adaptable IT GRC professional with hands-on experience in governance, risk management, controls, compliance, and policy administration to work of biggest ontario lottery and gaming corp. The successful candidate will be a strong learner who can quickly absorb new concepts, navigate ambiguity, and drive meaningful change across the organization. They will have demonstrated experience leading medium-to-large IT initiatives, building strong stakeholder relationships, and communicating effectively with audiences ranging from practitioners and managers to senior executives. While technical GRC expertise is important, we place equal value on learning agility, execution capability, and the ability to influence and collaborate across teams. The ideal candidate will have a solid foundation in IT controls and risk management, with familiarity with industry frameworks such as COBIT and NIST. Working knowledge of COBIT 2019 is highly desirable, but not mandatory.

What are the biggest GRC challenges you're trying to solve right now?

Our biggest challenge is moving from a collection of governance, risk, compliance, controls, and audit activities into a truly integrated GRC operating model. Today, many of the capabilities exist, but they're not always connected in a way that provides end-to-end visibility and accountability.

We're focused on strengthening the governance framework, modernizing our controls environment, improving traceability between risks and controls, and creating stronger alignment between IT, Enterprise Risk Management, Internal Controls, and Internal Audit. Ultimately, we want GRC to become an enabler of decision making, not just a compliance function.

What would success look like in the first year?

I would expect the incumbent to:

• Become a trusted advisor to stakeholders across IT and enterprise functions.
• Help operationalize and mature our IT Governance framework.
• Play a key role in the IT Governance awareness campaign planned for early next year
• Drive meaningful progress on the controls modernization program phase 2 (Phase 1 is almost complete).
• Establish stronger integration between risk management, controls, audit findings, and compliance activities.
• Improve IT policy administration and governance processes.
• Increase visibility into our IT control environment through better reporting, ownership, and metrics.

Which initiatives would be the highest priority for this role?

The top priorities would be:

1. Controls Modernization (phase 2)

• Rationalizing and improving our control environment.
• Strengthening risk-to-control mapping.
• Identifying key controls and improving control ownership.

1. IT Governance Framework

• Supporting rollout, adoption, and ongoing maturity of the governance framework.
• Managing the governance awareness campaign
• Enhancing governance processes, accountabilities, and decision structures.

1. Risk and Controls Integration

• Aligning IT risk management more closely with controls, attestations, audit findings, and enterprise risk processes by working with other teams

1. IT Policy Administration

• Improving policy lifecycle management, governance, and compliance monitoring.

How mature is the current IT GRC program?

I would describe the program as being in the developing-to-defined stage of maturity.

We have many foundational elements in place, including governance initiatives, risk and compliance activities, controls, policy management, attestation processes, and relationships with enterprise assurance functions. However, we're working to bring these capabilities together into a more cohesive and integrated operating model.

The opportunity for the successful candidate is that they won't be building from scratch, but they will play a significant role in shaping the next phase of maturity and helping move the organization toward a more coordinated and proactive GRC model.

If you could solve one GRC problem this year, what would it be?

If I had to choose one, it would be creating end-to-end alignment between governance, risk, controls, compliance, and audit activities.

The nature of the role

This is not a maintenance role. It's a transformation role. The incumbent will have the opportunity to help shape the future state of IT GRC, influence enterprise-wide governance practices, modernize the controls environment, and build stronger integration between risk, compliance, audit, and governance. The successful candidate will have a visible impact on how IT is governed and how risk-informed decisions are made across the organization.

Some additional comments

I'm not necessarily looking for the strongest IT GRC specialist on the market. I'm looking for someone who is highly organized, detail-oriented, eager to learn, adaptable, and capable of driving meaningful change, while bringing solid hands-on GRC experience. The ideal candidate can quickly absorb new concepts, lead medium-to-large initiatives, build strong relationships across the organization, and communicate with confidence at all levels, from practitioners and managers to senior leadership.

While technical GRC knowledge is important, mindset, learning agility, execution capability, and stakeholder management are key to success in this role. The incumbent should have a strong foundation in IT controls, risk management, and compliance, and be familiar with recognized industry frameworks and practices such as COBIT and NIST. Working knowledge of COBIT 2019 would be highly desirable, but it is not a mandatory requirement.

Pay Rate hr: CA$40-60.

JD might have used AI