Manager, GRC

Responsibilities

• Lead second-line advisory coverage for critical technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues.
• Partner with engineering and technology teams to evaluate domain posture and identify needed controls, remediation, and governance improvements.
• Review and challenge risk and control design to ensure mitigations are scalable, effective, and aligned with business, risk, and regulatory expectations.
• Coordinate across risk, controls, policy, audit, and assurance teams to turn incidents, audit findings, and regulatory expectations into actionable improvements.
• Intake, triage, and calculate inherent and residual risk with subject matter experts and risk owners; facilitate risk treatment decisions and validate mitigation plans.
• Communicate quantitative and qualitative risk tradeoffs and connect risks, controls, policies, incidents, and findings into clear decision-making and reporting narratives.
• Build, grow, and coach a team of technology and security analysts and senior analysts.

Requirements

• 8+ years of experience in technology risk, IT controls, IT audit, cybersecurity risk, or compliance.
• Hands-on experience delivering full-stack GRC services, including risk management, control design, continuous monitoring, and governance documentation.
• Deep understanding of technical design and governance principles in areas such as infrastructure resiliency, SDLC, change management, or incident response.
• Experience evaluating risks and control design, identifying weaknesses, and improving risk outcomes and control maturity.
• Experience managing and mentoring analysts while maintaining accountability for deliverables and timelines.
• Ability to influence cross-functional stakeholders, navigate ambiguity, and translate complex risk and compliance concepts into clear requirements for technical and non-technical audiences.
• Responsible use of generative AI with human oversight.

Compensation

• Annual base salary: $193,970–$228,200 USD.
• Additional compensation may include equity, bonus eligibility, and benefits.