Senior Specialist, Risk & Governance

Senior Specialist, Risk & Governance

📍 Location: Remote (Eastern or Central Time Zones Preferred)

Peregrin Services, a trailblazer in business process automation for the financial services industry, is looking for a proactive, detail-oriented Senior Specialist, Risk & Governance to help strengthen our risk management, governance, compliance, and internal control programs. This is a fully remote role for candidates based in the Eastern or Central time zones.

At Peregrin, we've been transforming the way lenders manage debt and customer service since 2000. From collections and recoveries to technology solutions and system integrations, we develop smart, scalable technology that supports credit card issuers and other lenders nationwide. We don't just support financial systems, we reimagine them.

We're a tight-knit team of experts dedicated to delivering cutting-edge technology, improving efficiency, and enhancing the customer experience. We're looking for a governance and risk professional who will help us continue that mission by strengthening the frameworks that support our growth, security, and operational excellence.

What You'll Do

This position helps ensure that Peregrin manages risk responsibly, meets its commitments, and turns audit and assessment findings into measurable improvements. The successful candidate will understand that governance is not simply documentation or compliance administration. It requires ownership, sound judgment, follow-through, and the ability to help teams make and sustain change.

• Maintain and enhance Peregrin's enterprise risk management program, including risk methodology, reporting, and governance routines.
• Plan and conduct internal risk assessments across business processes, technology, information security, compliance, and operations.
• Maintain the enterprise risk register and translate identified risks into clear ownership, action plans, target dates, and reporting.
• Evaluate internal controls, identify gaps or inefficiencies, and recommend practical improvements that fit a small, technology-enabled organization.
• Drive remediation and accountability by monitoring corrective actions, challenging delays, escalating unresolved risks, and verifying that changes are effective.
• Support policy governance, including policy development, review cycles, approvals, implementation, and evidence of compliance.
• Lead coordination for SOC 2, PCI DSS, and other company-level audits and assessments, including evidence collection, response management, and remediation tracking.
• Support customer audits, due diligence requests, and security or compliance questionnaires with accurate, timely, service-oriented responses.
• Partner with Technology, Information Security, Operations, Human Resources, Finance, and other teams to embed risk and control considerations into everyday work and business changes.
• Help evaluate, implement, and administer a Governance, Risk, and Compliance (GRC) platform, if adopted, including requirements, workflows, risk and control libraries, evidence management, reporting, and user adoption.
• Provide support for third-party risk management when needed; however, this position is primarily focused on Peregrin's internal risks, controls, accountability, and continuous improvement efforts.

What You'll Bring

• 5-7 years of experience in risk management, governance, compliance, internal audit, or internal controls.
• Experience working remotely, with a professional workspace and reliable internet connection capable of supporting frequent video calls.
• Demonstrated experience conducting internal risk or control assessments and translating findings into practical remediation plans.
• Strong understanding of risk assessment methodologies and internal control frameworks.
• Demonstrated ability to work independently and drive initiatives through completion.
• Strong personal accountability and a commitment to delivering accurate, timely, high-quality work.
• Ability to influence without direct authority, ask thoughtful but challenging questions, and hold stakeholders accountable while maintaining productive working relationships.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written and verbal communication skills.
• Proven ability to influence stakeholders and foster accountability across teams.
• A customer-focused mindset and an understanding that effective risk and governance practices support the reliability, security, and quality of the services Peregrin provides.
• Experience in a small or mid-sized organization where employees work across functions and are comfortable both developing strategy and executing day-to-day operational work.

Preferred Qualifications

• Experience supporting SOC 2, PCI DSS, vendor risk management, or similar compliance and governance programs.
• Experience implementing, configuring, administering, or improving a GRC platform such as ServiceNow GRC/IRM, Archer, LogicGate, AuditBoard, OneTrust, Hyperproof, or comparable tools.
• Working knowledge of IT operations, information security, cloud or hosted environments, software delivery, access management, change management, vulnerability management, or business continuity planning.
• Experience in financial services, fintech, banking, insurance, healthcare, or other highly regulated industries.
• Experience working within fully remote or distributed organizations.
• Experience in small or mid-sized businesses where employees wear multiple hats and contribute across multiple functions.
• Professional certifications such as CRISC, CISA, CIA, CRCM, CISSP, or related credentials.

Gallagher's HR & Organizational effectiveness team provides expert guidance and hands-on support in HR, Recruiting, and Payroll to help organizations stay focused on achieving their strategic business goals.