Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Governance, Risk, and Compliance (GRC) Manager role.

Rezi rewrites your resume against DXC Technology's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Governance, Risk, and Compliance (GRC) Manager posting at DXC Technology — free, in seconds.

About the Role

DXC Technology is seeking an experienced Governance, Risk, and Compliance (GRC) Manager to lead cybersecurity governance, risk management, policy compliance, and audit readiness across enterprise technology environments. This role is responsible for developing and maintaining security policies, overseeing risk assessment and mitigation activities, coordinating compliance initiatives, and ensuring that security controls align with applicable regulatory requirements, industry standards, and business objectives. You'll directly shape how the world's leading insurers operate by helping to transform the policy, underwriting, and claims systems that millions of people rely on every day.

Responsibilities

Develop, maintain, and oversee cybersecurity policies, standards, and procedures.
Lead risk assessments across applications, cloud environments, infrastructure, software development processes, and third-party integrations.
Manage policy compliance and audit readiness activities, including evidence collection, control assessments, internal and external audits, customer security assessments, and regulatory examinations.
Evaluate the effectiveness of cybersecurity controls and work with technical and business teams to address control gaps, policy exceptions, and identified compliance deficiencies.
Partner with cybersecurity, engineering, infrastructure, and development teams to ensure security controls are implemented, documented, and auditable throughout the software development lifecycle (SDLC) and across technology environments.
Oversee third-party risk management processes, including vendor security assessments, review of security requirements, identification of supply chain risks, and ongoing monitoring of critical technology providers.
Establish and maintain processes for tracking risk remediation, compliance findings, control deficiencies, policy exceptions, and formal risk acceptance.
Support governance forums, risk committees, and architecture review meetings.
Oversee business continuity and disaster recovery governance, including testing, tabletop exercises, documentation, and remediation of identified gaps.
Prepare and present risk and compliance reports for executive leadership and business stakeholders.
Monitor emerging cybersecurity threats, regulatory developments, and changes in industry standards.
Identify opportunities to improve security governance, streamline compliance activities, strengthen internal controls, and enhance the effectiveness of risk management processes.
Collaborate with stakeholders to establish clear accountability and timelines for resolving identified risks and compliance issues.
Supervise, develop, and lead personnel assigned to the GRC function.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business Administration, or a related discipline.
7+ years of experience in cybersecurity, risk management, governance, regulatory compliance, IT audit, or a related field.
3+ years of experience in GRC, cybersecurity risk management, policy compliance, or audit-related responsibilities.
Experience in cybersecurity, risk management, and policy compliance or audit within the financial services sector.
Strong understanding of cybersecurity principles, security controls, enterprise risk management, and compliance practices.
Experience developing, implementing, reviewing, or assessing security policies, standards, procedures, and internal controls.
Experience conducting risk assessments, documenting findings, evaluating control effectiveness, and managing remediation activities.
Experience supporting internal or external audits, compliance reviews, control assessments, or regulatory examinations.
Understanding of technology and cybersecurity risks associated with applications, cloud platforms, infrastructure, data protection, and software development.
Experience preparing risk reports, maintaining risk registers, documenting compliance findings, and communicating remediation status to stakeholders.
Strong analytical, organizational, problem-solving, and communication skills.
Ability to explain technical security risks and compliance requirements to both technical teams and business stakeholders.
Demonstrated ability to coordinate cross-functional activities, manage competing priorities, and drive risk remediation to completion.
Experience collaborating with stakeholders across cybersecurity, technology, audit, risk, compliance, and business functions.

Skills

Cybersecurity
Risk management
Policy compliance
Audit readiness
NIST Cybersecurity Framework (CSF)
NIST SP 800-53
ISO 27001
COBIT
GRC platforms or tools
Cloud environments
SaaS platforms
Enterprise applications
IT infrastructures
Third-party risk assessments
Vendor security reviews
Technology supply chain risks
Business continuity
Disaster recovery
Operational resilience
Risk dashboards
Compliance metrics
Executive reporting
Regulatory compliance
Leadership
Mentoring
Supervision

Location

United States
Guam
Puerto Rico

Work Type

Hybrid

Experience Level

7+ years of experience
3+ years of experience

Education Level

Bachelor's degree
Advanced degree

About the Company

DXC Technology is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations.
DXC's Insurance Software and BPS (ISB) helps insurers around the world modernize and run their core operations at scale by combining deep industry expertise, proven software platforms, and innovative AI-driven solutions.
A global market leader in core insurance platforms, ISB delivers solutions across policy administration, claims, billing, analytics, and digital engagement supporting Life & Annuity, Property & Casualty, and Specialty insurance markets.
At DXC Technology, we believe strong connections and community are key to our success.
Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances.
We’re committed to fostering an inclusive environment where everyone can thrive.

Equal Opportunity

DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law.
We participate in E-Verify.
DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters.
If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company.
DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf.