GRC Director The Role • Assess and document the institution’s compliance and risk posture as they relate to its information assets and operating