Manager, Governance, Risk & Compliance

📋 Description

• Lead GRC across security policies, risk, audits, and third-party risk.
• Develop, maintain, and operationalize global security policies and procedures.
• Own audit readiness across SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST.
• Lead GovRAMP and PCI DSS readiness, including evidence collection and remediation tracking.
• Coordinate audit evidence, testing, and auditor communications.
• Maintain the security risk register and executive risk reporting.

🎯 Requirements

• 6+ years in security governance, risk management, or audits.
• Experience with SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST 800-53.
• Strong understanding of controls, policy management, risk assessment, evidence.
• Experience working with auditors, customers, stakeholders, and execs.
• Experience managing third-party risk or vendor security reviews.
• Translate complex compliance obligations into practical requirements.

🎁 Benefits

• Flexible time off and comprehensive medical, dental, and vision plans.
• 401(k) with company match and health savings account contributions.
• Flexible spending account plus life, accident, and disability coverage.
• Travel insurance and employee assistance programs.
• Well-being benefits and family planning options.