Program Manager, GRC & AI Strategy

TransUnion’s Job Applicant Privacy Notice

Personal Information We Collect

Your Privacy Choices

Team Overview

The Global Cyber Governance, Risk & Compliance (GRC) team oversees cybersecurity governance, risk management, compliance, controls, and regulatory readiness across TransUnion. The team partners with Information Security, Technology, Audit, Compliance, Legal, Privacy, and Enterprise Risk Management to strengthen cyber resilience and support trusted business operations. This position reports to the SVP, Global Cyber Governance, Risk & Compliance. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview and Core Responsibilities

• Serve as a strategic advisor and operational partner to the SVP, Global Cyber Governance, Risk & Compliance, translating organizational priorities into executable plans and measurable outcomes.
• Develop and maintain multi-year strategies, annual operating plans, organizational roadmaps, performance objectives, and a centralized operating rhythm for the Global Cyber GRC organization.
• Lead the development and communication of key performance indicators, key risk indicators, risk-reduction measures, executive dashboards, and governance reporting for the CISO, executive leadership, and business stakeholders.
• Create executive presentations, board-ready materials, and communication artifacts that translate complex cybersecurity, risk, compliance, and controls information into clear business insights.
• Lead a small team responsible for Cyber GRC reporting, performance metrics, data analysis, governance reporting, and executive communications.
• Modernize and automate Cyber GRC processes through artificial intelligence, workflow automation, analytics, and emerging technologies to improve efficiency, consistency, and scalability.
• Partner with Information Security Officers, Technology, Audit, Compliance, Legal, Privacy, Technology Risk, Enterprise Risk Management, Finance, and business leaders to improve risk, control, and compliance reporting.
• Oversee budget planning, workforce planning, resource allocation, and financial tracking activities for the Global Cyber GRC organization.
• Monitor strategic initiatives and transformation efforts, providing leadership with visibility into progress, dependencies, risks, issues, remediation priorities, and business outcomes.

Required Knowledge and Experiences

• At least 10 years of experience in cybersecurity, information security, risk management, compliance, governance, controls, technology risk, audit, or a related field, including experience operating in a complex enterprise environment.
• Experience supporting senior executives through strategic planning, organizational governance, executive communications, operational management, and data-driven decision-making.
• Demonstrated experience leading Cyber GRC, cyber risk, compliance, controls assurance, technology risk, or governance programs and translating complex requirements into measurable business outcomes.
• Strong knowledge of cybersecurity governance, control effectiveness, regulatory compliance, and risk management methodologies, including frameworks such as the NIST Cybersecurity Framework, NIST Special Publication 800-53, ISO/IEC 27001, COBIT, CIS Controls, FFIEC, PCI DSS, and SOX.
• Bachelor’s degree in cybersecurity, business administration, information technology, risk management, or a related discipline; a master’s degree is preferred.

Required Technical Skills

• Advanced proficiency with Microsoft 365 and Power BI, including the development of executive presentations, dashboards, scorecards, and performance reports.
• Experience using reporting and analytics platforms to analyze complex datasets and translate results into actionable recommendations for executive audiences.
• Experience developing and managing key performance indicators, key risk indicators, risk-reduction measures, compliance reports, and control-effectiveness metrics.
• Experience implementing artificial intelligence-enabled solutions and workflow automation tools to improve manual governance, assessment, reporting, and compliance processes.
• Ability t…