What are the responsibilities and job description for the Manager, Governance, Risk & Compliance (GRC) position at DPR Construction?
Job Description
DPR is seeking a hands-on leader to manage governance, risk, and compliance (GRC) programs that safeguard our data, support regulatory compliance, and enable secure business growth. This role combines strategic oversight with execution, managing a small team of 2 to 4 analysts to develop policies, lead risk assessments, oversee audits, and drive the effectiveness of IT and security controls.
The ideal candidate has deep expertise in compliance, privacy, and risk management, with the ability to translate frameworks (e.g., NIST, ISO 27001) into practical business outcomes while fostering a culture of accountability and risk awareness.
Key Responsibilities
Required:
Working at DPR, you'll have the chance to try new things, explore unique paths and shape your future. Here, we build opportunity together—by harnessing our talents, enabling curiosity and pursuing our collective ambition to make the best ideas happen. We are proud to be recognized as a great place to work by our talented teammates and leading news organizations like U.S. News and World Report, Forbes, Fast Company and Newsweek.
Explore our open opportunities at www.dpr.com/careers.
DPR is seeking a hands-on leader to manage governance, risk, and compliance (GRC) programs that safeguard our data, support regulatory compliance, and enable secure business growth. This role combines strategic oversight with execution, managing a small team of 2 to 4 analysts to develop policies, lead risk assessments, oversee audits, and drive the effectiveness of IT and security controls.
The ideal candidate has deep expertise in compliance, privacy, and risk management, with the ability to translate frameworks (e.g., NIST, ISO 27001) into practical business outcomes while fostering a culture of accountability and risk awareness.
Key Responsibilities
- Develop and maintain enterprise policies for IT, data privacy, data classification, retention, and security.
- Lead enterprise risk assessments and maintain the risk register.
- Ensure compliance with GDPR, CCPA, and other regulations.
- Oversee data privacy programs, data access controls, and secure data management practices.
- Manage client security surveys, external audits, and cyber liability insurance renewals.
- Develop cyber awareness initiatives that drive organizational culture change.
- Administer GRC tools and reporting dashboards for leadership visibility.
- Supervise and mentor 2 to 4 GRC analysts, ensuring timely delivery of assessments and documentation.
Required:
- Bachelor’s degree in information security, Risk Management, Information Systems, or related discipline.
- 5 years of progressive experience in IT security, compliance, risk, or data privacy.
- Strong knowledge of GDPR, CCPA, and other data protection regulations.
- Experience managing audits, compliance programs, and policy development.
- Excellent communication and leadership skills.
Working at DPR, you'll have the chance to try new things, explore unique paths and shape your future. Here, we build opportunity together—by harnessing our talents, enabling curiosity and pursuing our collective ambition to make the best ideas happen. We are proud to be recognized as a great place to work by our talented teammates and leading news organizations like U.S. News and World Report, Forbes, Fast Company and Newsweek.
Explore our open opportunities at www.dpr.com/careers.