Manager, Security Governance & Risk

📋 Description

• Lead, coach, and develop a GRC team across audit, privacy, and risk.
• Own Emburse's GRC platform strategy, data quality, automation, and reporting.
• Oversee security and compliance audits with delegated planning and evidence coordination.
• Own end-to-end enterprise information security risk management program.
• Advance maturity of risk scoring, trends, and communication beyond static heat maps.
• Lead Third-Party Risk Management program, including vendor reviews and due diligence.

🎯 Requirements

• Strong analytical skills; ability to structure risk data and present to executives and boards.
• Proven people leadership; delegate ownership and coach team members.
• Comfort operating with ambiguity; make defensible decisions in evolving standards.
• Ability to influence across Engineering, Product, Legal, Finance, and Sales.
• Judgment on where to apply rigor vs. acceptable risk; experience with large cross-functional teams.
• Experience with change management, identity/access management, policy management, and data

🎁 Benefits