Senior Manager, Policy and Controls Governance

📋 Description

• Own policy governance program: lifecycle, standards, approvals, audits.
• Lead end-to-end policy lifecycle: creation, review, publication, exceptions.
• Own controls governance: framework, revision, harmonization, cross-functional reviews.
• Govern ARC issues and remediation: intake, triage, tracking, closure reporting.
• Produce exec reporting and metrics on policy health and controls maturity.
• Align policies with compliance requirements; translate changes into updates.

🎯 Requirements

• 10+ years in program mgmt, governance, or compliance within InfoSec or GRC.
• Experience leading policy/procedure programs at scale with governance frameworks.
• Knowledge of SOC2, ISO27001, PCI DSS, HIPAA, NIST CSF; translate to policy.
• Full lifecycle oversight across cross-functional programs: planning, risk, changes, exec reports.
• Advanced Jira and GRC or policy management platform experience.
• Proven people leadership: prioritizing, coaching, accountability.

🎁 Benefits

• Equity and employee stock purchase program.
• Fertility and adoption assistance.
• Generous parental leave policy (20 weeks fully-paid).
• 401(k) plan.
• Transgender-inclusive health insurance.
• Flexible paid time off.