Manager and Senior Manager: Governance, Risk, & Compliance (GRC)

📋 Description

• Lead governance program development and alignment with ISO 27001, SOC 2, GDPR.
• Develop and manage scalable security control frameworks and third-party risk programs.
• Manage the enterprise risk register and provide executive reporting.
• Lead GRC intake and triage; oversee complex assessments and team workload.
• Coach and develop GRC analysts; scale program with effective delegation.
• Oversee third-party/vendor risk assessments with Legal, IT, and Security.

🎯 Requirements

• 8+ years in GRC or information security, with ~4+ years managing professionals.
• Deep understanding of ISO 27001, SOC 2, GDPR, PCI, NIST CSF, HIPAA.
• Experience mentoring compliance, audit, or GRC professionals.
• Operational GRC program leadership with KPI reporting and cross-functional coordination.
• Strong knowledge of cybersecurity controls, cloud security, and third-party risk.
• Bachelor’s degree required; CS, cyber security or tech preferred.

🎁 Benefits

• Competitive base salary and meaningful equity.
• Benefits package included.
• Total compensation includes base, equity, and benefits.