Manager, Governance, Risk & Compliance
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior GRC leader scaling Doppel’s security, privacy, compliance, and AI governance program. Owning certifications, enterprise risk, controls, customer trust, and a growing GRC team.
Responsibilities:
- Define and execute the multi-year GRC strategy and roadmap; set priorities, budget, tooling, KPIs, and report program health, risk posture, and audit readiness to the CISO and executive leadership.
- Hire, manage, coach, and develop a team of GRC analysts; set goals and career paths, run performance reviews, delegate framework and workstream ownership, and build a culture of rigor and continuous improvement.
- Serve as executive owner for SOC 2 Type II, ISO 27001, ISO 27701, ISO 42001, and future frameworks; direct audit scoping, readiness assessments, remediation, evidence strategy, auditor relationships, and management review cycles.
- Own enterprise and security risk frameworks, risk appetite, risk registers, risk review forums, assessments, escalation, remediation, and formal risk acceptance.
- Design the common control framework and continuous-monitoring approach mapping ISO, SOC 2, NIST, GDPR/CPRA, PCI, and HIPAA/HITRUST; oversee testing, exceptions, and corrective actions.
- Own access governance, including access certifications, least-privilege standards, joiner/mover/leaver controls, and privileged access monitoring.
- Set vendor risk strategy and tiering; oversee due diligence, contractual security and privacy requirements, and monitoring of critical suppliers, partners, and AI service providers.
- Lead customer trust activities including security and privacy questionnaires, RFP responses, Trust Center content, and customer-facing security reviews; partner with Sales on enterprise deals.
- Own policy and standards lifecycle, security and privacy awareness and role-based training, and privacy operations including DPIAs, data mapping, and data subject requests.
- Sponsor incident response tabletop exercises and business continuity/disaster recovery testing; deliver executive and board-level dashboards.
- Lead responsible AI governance under ISO 42001 and emerging regulation such as the EU AI Act, partnering with Product and Engineering.
Requirements:
- 8+ years in GRC, security audit, or risk management, with at least 1 year managing people and owning a GRC or compliance program end to end.
- Track record hiring, developing, and retaining high-performing GRC professionals, and of scaling a program and team through rapid company growth.
- Executive-level ownership of SOC 2 Type II and ISO 27001 programs through multiple certification and surveillance cycles, including scoping, auditor selection and management, and remediation.
- Hands-on experience with ISO 27701 and ISO 42001 or equivalent privacy and AI governance programs.
- Deep command of management systems (ISMS/PIMS/AIMS), Trust Services Criteria, common control frameworks, control testing, sampling, and evidence sufficiency in cloud-first environments (AWS/Azure/GCP, SaaS).
- Experience designing and operating enterprise risk management, including risk appetite, risk registers, risk forums, and formal risk acceptance with senior leadership.
- Proven ability to run access certifications, third-party risk management, and customer security reviews at enterprise scale, and to select and implement GRC tooling and automation.
- Strong executive communication skills: comfortable presenting risk and compliance posture to leadership, boards, auditors, and enterprise customers, and translating technical detail into business impact.
- Relevant certifications such as CISA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or CIPP/CIPM are a plus.
Similar Jobs
Data Compliance Consultant
Consultant conformité Data chez Talan, groupe international de conseil en technologie et data. Audits, analyse réglementaire et pilotage de projets RGPD, LCB-FT et BCBS 239.
Compliance Associate – Medicare/ACA
Compliance Associate supporting Medicare/ACA regulatory operations at Senior Market Sales. Managing investigations, audits, marketing approvals, training, and compliance reporting.
Regulatory Representative
Regulatory Representative managing Globalstar’s satellite communications compliance and licensing. Coordinating FCC, ITU, spectrum, export-control, and agency matters across global markets.
Compliance Assurance Manager
Compliance Assurance Manager leading quality monitoring, regulatory controls, and compliance training. Supporting Sumer’s Hubs and teams in maintaining high standards across its compliance programme.
Regulatory and Start Up Specialist, Portuguese Speaker
Regulatory and Start Up Specialist enabling clinical trial site activation in Spain for Precision for Medicine, a global clinical research organization. Managing submissions, contracts, budgets, and essential documents.
Regulatory and Site Start-Up Specialist
Regulatory and Site Start-Up Specialist supporting clinical trial submissions and site activation in Taiwan. Coordinating authorities, ethics committees, essential documents, and cross-functional study teams.
Security/Compliance SME
Security/compliance SME advancing Department of the Air Force ICAM capabilities for Koniag Government Services. Aligning Zero Trust architectures, ATO processes, and governance studies with DoD policy.
Consultant, Accreditation Compliance
Accreditation compliance consultant supporting Navitus’ pharmacy benefit manager quality programs. Leading audits, accreditation readiness, corrective actions, and stakeholder education.
SCRM Compliance SME
SCRM compliance expert securing federal technology supply chains for Accenture Federal Services. Developing policies, assessments, controls, and audit evidence across 500+ projects.
Regulatory Specialist – Canada
Local Regulatory specialist supporting Health Canada lifecycle submissions for biologic and small molecule rare disease products. Providing Canadian regulatory intelligence and coordinating Health Canada interactions.
CMC Regulatory Consultant, Biologics
CMC Regulatory Consultant supporting biologic and rare-disease product submissions to Health Canada. Managing Canadian life-cycle regulatory activities, CMC authoring, and regulatory intelligence for Syneos Health clients.
Senior DOT Compliance Instructor
Senior DOT compliance instructor training commercial drivers and overseeing fleet compliance for SOLV Energy’s utility-scale energy infrastructure projects. Fully remote with 70–80% travel to field locations.
Senior Regulatory Affairs Program Lead – MedTech Surgery
Regulatory Affairs Lead advancing Johnson & Johnson’s OTTAVA robotic instruments and accessories approvals. Developing global strategies, authoring FDA submissions, and guiding product teams.
Senior Regulatory Affairs Specialist
Senior Regulatory Affairs Specialist advancing regulatory strategy for Eko Health’s FDA-cleared AI stethoscopes, ECG hardware, and digital health platforms. Leading QMS remediation and global market submissions.
Senior Compliance Analyst
Senior Compliance Analyst investigating escalated Medicare Advantage sales and marketing compliance cases for Devoted Health. Recommending corrective actions, improving workflows, and supporting compliance analysts.
Senior Compliance Analyst – Healthcare Regulatory Compliance
Senior Compliance Analyst safeguarding Cuvo Health’s telehealth MSO infrastructure across US healthcare regulations. Auditing physician arrangements, FMV compensation, licensing, and multi-state compliance.
Senior Regional Compliance Officer
Senior Compliance Officer overseeing MoneyGram agent AML/CFT and anti-fraud compliance across Australia and New Zealand. Acting as Deputy Compliance Officer and liaising with regulators and law enforcement.
VP, Policy and Regulatory Strategy
VP leading Circle’s Latin American policy, licensing, and regulatory strategy. Shaping market expansion for digital-asset payments and blockchain financial infrastructure.
Government Compliance Technical Specialist
Government compliance specialist advancing FedRAMP, TX-RAMP, and IRAP programs for BeyondTrust’s identity security SaaS. Automating evidence collection and managing cloud compliance documentation and remediation.
Regulatory Consultant – Submission Manager, Veeva RIM
Regulatory Consultant managing Veeva Vault RIM submission plans and regulatory publishing for Syneos Health’s life sciences clients. Supporting Vertex submission managers with project tracking and coordination.