Governance, Risk, and Compliance (GRC) Program Lead

This role provides leadership and expertise in building, scaling, and continuously improving enterprise Governance, Risk, and Compliance (GRC) programs for Sony Pictures Entertainment and its affiliates. The position is responsible for managing end-to-end cybersecurity and compliance initiatives, including PCI DSS, ISO 27001, and privacy/security controls, while supporting strategic Sony Group information security governance initiatives. The role partners closely with technical and business stakeholders to lead assessments, drive remediation, and modernize control assessment activities through workflow automation and AI-assisted evidence collection.