Director, Governance, Risk & Compliance; GRC

Position: Director, Governance, Risk & Compliance (GRC)
Location: St. Louis

At MTM, we are not just colleagues; we are collaborators on a shared mission; communities without barriers. We have exciting opportunities to join our growing team where your work has a direct impact on the communities we serve. Our company culture is one of innovation, collaboration, and growth. If you are passionate, driven, and ready to join a team where your work will directly transform and shape our industry, then we want to talk to you!

The
** Director, Governance, Risk & Compliance (GRC)
** serves as the enterprise’s senior leader responsible for governing the compliance dimensions of modern technology and AI. This role is a second line of defense, and provides the strategic oversight and assurance needed to ensure the organization’s technology, and AI ecosystem aligns with regulatory expectations, ethical standards, and customer commitments.

The
** Director, GRC
** owns the technology & AI compliance Framework, oversees governance for high‑risk technologies, and ensures the organization is prepared for external scrutiny, including certifications such as SOC 2, HITRUST, and FedRAMP.This is a governance and risk leadership position, ideal for someone who understands technology deeply but operates with a compliance, assurance, and regulatory mindset.
*
* What you’ll do:

**** Audit & Certification Readiness
*** Lead compliance oversight for SOC 2, HITRUST, FedRAMP, and similar certifications
* Ensure first-line teams produce audit-ready artifacts
* Track remediation and risk closure
** Technology & AI Governance
*** Lead enterprise governance for technology and AI within the Compliance function
* Own policies, standards, and controls related to cloud, data, AI/ML/GenAI, automation, and software development
* Drive risk-tiering and governance requirements for technology and AI systems
* Ensure alignment to regulatory, ethical, and customer expectations
* Establish KRIs and KPIs for technology and AI compliance (control maturity, issues, exceptions, drift signals, audit readiness)
* Provide regular reporting to senior leadership and the AI Governance Committee
* Lead thematic reviews of technical risk trends and emerging threats
** Compliance Oversight
*** Ensure cloud and SaaS environments meet compliance-related controls (SOC 2, HITRUST, FedRAMP)
* Validate due diligence, technical assessments, and ongoing monitoring for technology adoption
* Ensure data governance practices incorporate compliance standards for classification, retention, quality, and access
* Support privacy with DPIAs and data-related assessments
* Deliver training on AI governance, cloud/SaaS compliance, and technology risks
* Build processes, templates, and playbooks that operationalize compliance expectations
* Serve as a strategic advisor to technology, data, and AI leaders
* Govern AI risk assessments, use-case oversight, and documentation standards
* Define compliance criteria for high-risk AI
* Monitor evolving AI regulations
* Set compliance expectations for technology and AI vendors
* Oversee due diligence, contractual requirements, and ongoing vendor monitoring
* Define compliance-required controls; review and challenge technical architecture, risk assessments, and AI documentation
* Oversee compliance evidence requirements (e.g., model cards, testing results, data lineage)
* Advise on risk acceptance, control gaps, and compensating controls
* Provide daily guidance for team of direct reports
*
* What you’ll need:

***** Experience, Education &

Certifications:

**** High School Diploma or G.E.D
* 4+ years in technology compliance, technology risk, cybersecurity risk, audit, or data governance roles
* 4+ years of data analysis experience
* Experience with regulatory frameworks and certifications such as SOC 2, HITRUST, FedRAMP
**
* Skills:

**** Strong command of AI governance, model risk, or responsible AI frameworks
* Excellent executive presence, judgment, and the ability to influence senior technical leaders
* Ability to translate complex technical concepts into actionable compliance requirements
* Outstanding analytical and organizational skills and attention to detail
* Ability to work independently and collaboratively with others to achieve defined…