Senior Governance Specialist

Supports the design, execution, and continuous improvement of IT governance, risk, and compliance processes across the P&C IT organization.

Partners with IT leadership, application teams, infrastructure teams, business stakeholders, Internal Audit, and enterprise governance functions to identify, assess, monitor, and communicate technology risk.

Supports compliance readiness and control execution across areas such as SOX, access governance, audit support, vulnerability management, enterprise risk management, and internal IT control activities.

Leverages Automation and Artificial Intelligence, analytics, and reporting capabilities to modernize governance processes, reduce manual effort, improve consistency, and enhance operational efficiency.

Develops and improves risk reporting, dashboards, metrics, and insights to strengthen leadership visibility into technology risks, control health, remediation progress, and mitigation priorities.

Identifies opportunities to streamline and automate repeatable governance activities, including evidence collection, control monitoring, compliance validation, issue tracking, and risk mitigation workflows.

Facilitates IT audits, assessments, and reviews by coordinating evidence requests, documenting results, tracking remediation activities, and communicating status to stakeholders.

Maintains and enhances documentation for IT governance and compliance processes, including control matrices, procedures, risk records, evidence repositories, process flows, and reporting materials.

Provides guidance, consultation, and training to IT and business stakeholders on governance expectations, control responsibilities, risk management practices, and compliance requirements.

Monitors emerging technology, risk, compliance, and AI-enabled process improvement trends to help P&C IT Risk and Compliance evolve its practices and capabilities.

Serves as a trusted advisor and collaborative partner to technical teams, business stakeholders, and leadership by translating complex risk and compliance topics into practical guidance and actionable next steps.

Performs other duties as assigned.

Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, Business Administration, or a related field.

Generally, a minimum of 6 years of IT governance, risk management, compliance, or audit.

Completion of or continuing progress toward a professional designation preferred, such as Certified in the Governance of Enterprise IT (CGEIT), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Risk and Information Systems Control (CRISC).

Strong understanding of IT governance frameworks and regulatory compliance requirements. Stays current on emerging IT risks, technologies, and regulatory changes affecting the insurance industry.

Proficiency in GRC tools and platforms supporting governance processes (e.g., ServiceNow, SailPoint).

Excellent communication, stakeholder engagement, and business relationship skills.

Requires a high level of understanding of organization's business and technology operations.

Demonstrates analytical, problem-solving, and organizational skills with attention to detail. Ability to lead and consult on provide technical and process recommendations and provide guidance to team members.