Manager, Governance Risk & Compliance (GRC)

📋 Description

• Lead the day-to-day operations of the GRC function, ensuring timely execution of governance, risk
• Lead enterprise risk reviews by driving GRC intake and request triage, personally overseeing
• Perform and lead the third-party risk management lifecycle by conducting and overseeing vendor risk
• Manage team workload and capacity by assigning, tracking, and escalating requests as needed to
• Develop and report operational metrics and KPIs, providing weekly dashboards and status updates to
• Contribute directly to governance activities, including policy management, control assessments

🎯 Requirements

• 8+ years of experience in GRC, information security, cybersecurity; with 2+ years of experience
• Demonstrated experience leading operational GRC programs, including intake management, workload
• Extensive hands-on experience performing third-party/vendor risk assessments, security reviews, due
• Strong knowledge of SSDLC risk assessments and application security governance processes.
• Deep knowledge of security and privacy frameworks and regulations, including ISO 27001, SOC 2, NIST
• Excellent written and verbal communication skills, with the ability to communicate effectively with

🎁 Benefits

• base salary
• equity
• benefits
• competitive base salaries
• meaningful equity