• You will report to the VP of Information Security. • Own the day-to-day operation and continuous improvement of Aya’s enterprise GRC program, with a focus on modernization and scale. • Serve as the primary owner of ServiceNow GRC / IRM, driving configuration, optimization, and adoption across the organization. • Design and evolve how regulatory and framework requirements are translated into scalable, automated controls and workflows. • Lead compliance efforts for SOC 2 and ISO/IEC 27001:2022, including readiness activities, audit execution support, and remediation tracking. • Establish clear control ownership, traceability, and audit-ready documentation that teams can confidently operate against. • Champion a compliance automation mindset, improving automated control testing, evidence collection, reporting, and dashboards to reduce manual effort and operational friction. • Collaborate with ServiceNow platform and engineering partners to ensure GRC solutions are scalable, supportable, and well-integrated. • Build and use dashboards and metrics to communicate compliance posture, trends, and risk insights to leadership. • Manage, coach, and develop a team of compliance analysts, setting clear expectations, accountability, and quality standards while supporting career growth. • Act as a trusted GRC partner across Security, IT, Engineering, Finance, Legal, and Privacy, translating risk and compliance concepts into business‑relevant language that enables action.