Senior GRC Manager
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior GRC Manager leading security governance, risk management, and multi-framework compliance for a United States organization. Driving audit readiness, control validation, policy lifecycle management, and executive risk reporting.
Responsibilities:
- Lead and manage the governance calendar and recurring GRC operating cadence, including risk committee activities, policy publication schedules, audit milestones, and control validation programs
- Oversee audit readiness and evidence management across applicable compliance frameworks
- Administer and continuously improve the enterprise risk management program, including risk identification, risk register maintenance, ownership tracking, risk reviews, and executive reporting
- Manage the full policy lifecycle, including drafting coordination, review, publication, communication, and exception management alignment
- Lead control effectiveness validation, including control design reviews, operational effectiveness testing, evidence standards, sampling methodologies, and remediation follow-up
- Oversee access governance programs from a compliance and risk perspective
- Support AI governance, customer assurance, architecture reviews, and security review processes
- Track audit findings, risk remediation, customer diligence requests, and program assessment results, escalating significant risks and obstacles
- Maintain customer-facing security assurance materials, evidence packages, and trust documentation
- Prepare leadership-level reporting on governance decisions, risk posture, compliance status, and remediation progress
- Collaborate with Security, Internal IT, Legal, Privacy, Compliance, and business stakeholders on evidence collection, testing, remediation planning, and validation
- Promote evidence quality, repeatable governance processes, accountability, and continuous improvement
Requirements:
- Strong knowledge of governance, risk management, compliance programs, policy management, and control validation methodologies
- Extensive understanding of SOC 2, PCI, ISO 27001, CMMC, and NIST-aligned standards
- Expertise in risk identification, risk register administration, ownership tracking, risk assessments, and executive reporting
- Strong policy development, procedure documentation, and executive-level writing skills
- Experience conducting control effectiveness reviews, operating effectiveness testing, evidence validation, remediation oversight, and audit support
- Knowledge of governance operating models, committee facilitation, calendar management, and follow-through on governance decisions and remediation
- Strong executive communication, presentation, and reporting skills
- Familiarity with access governance, exception management, customer assurance programs, and cross-framework control mapping
- Knowledge of AI governance, third-party risk management, and privacy governance
- Strong stakeholder management, relationship-building, accountability, and issue escalation skills
- Ability to prioritize, manage multiple initiatives, and meet deadlines in a fast-paced environment
- Bachelor's degree in a relevant field or equivalent combination of education and relevant professional experience
- Minimum of seven (7) years of experience in GRC, Security Compliance, IT Audit, Enterprise Risk Management, or Security Program Management
- Experience managing audit readiness, evidence collection, control testing, and compliance initiatives across multiple frameworks
- Experience supporting risk committees, governance forums, executive reporting, and enterprise-wide policy management
- Preferred: experience with GRC technology platforms and evidence-management workflows
- Preferred: customer-facing assurance programs, due diligence, vendor security reviews, and security trust programs
- Preferred: CISSP, CISA, CRISC, ISO Lead Auditor, ISO Lead Implementer, PCI QSA, or equivalent credentials
- Preferred: experience in highly regulated, client-assurance-focused, or defense-adjacent environments
- Prolonged periods of sitting at a desk and working on a computer
- Must be able to lift up to 15 pounds at times
Similar Jobs
Grants Compliance & Monitoring Specialist
Grants compliance specialist evaluating federal grant programs for emergency management consulting firm. Developing monitoring tools, trainings, reports, and corrective action recommendations for clients.
Senior Azure Government Security – Compliance Architect
Azure security architect owning compliance, authorization, and monitoring for Florida’s government Decision Intelligence Platform. Securing analytics across up to 35 state agencies.
OneTrust Consultant – Data Discovery, Assessment Automation, Data Mapping, Cookie Compliance, Incident Management
Consultor OneTrust implementando módulos de privacidade e avaliação de terceiros. Apoiando governança de dados, compliance e treinamento de equipes e clientes.
TPR Compliance Officer
TPR Compliance Officer implementing Tenet’s ethics, compliance, privacy, and security programs. Supporting compliance across hospitals and healthcare facilities in assigned U.S. markets.
Director, Legislative & Regulatory Affairs – Solar
Director leading legislative and regulatory strategy for IGS Energy, a U.S. and Canadian energy retailer. Advancing solar, storage, and distributed-energy policies supporting business growth.
Director, Quality, Regulatory
Quality and regulatory director ensuring MANSCAPED grooming products meet safety, quality, and global compliance standards. Leading QMS, supplier quality, product safety, and regulatory strategy.
Senior Director, Regulatory Affairs
Senior regulatory leader guiding global drug approvals for Ardelyx, a commercial-stage biopharmaceutical company. Driving FDA, EMA, and worldwide submissions from development through post-approval lifecycle management.
PCI Compliance Specialist, French
PCI compliance support specialist guiding US merchants through PCI-DSS requirements. Resolving customer issues across phone, chat, email, and ticket channels for VikingCloud’s cybersecurity platform.
Compliance Officer – Onboarding
Compliance Officer reviewing private banking onboarding and AML/CTF requirements for Swissquote, Switzerland’s online banking leader. Supporting regulatory projects, tax compliance, and internal process improvements.
Senior Director, Global Risk and Compliance
NVIDIA Senior Director leading global risk and compliance for AI infrastructure. Developing strategies, managing compliance teams, and advising leadership on risk mitigation.
Associate Director, Regulatory Affairs – Advertising and Promotion
Associate Director guiding FDA advertising and promotion compliance for Definium Therapeutics, a biopharmaceutical company developing psychedelic treatments. Leading promotional review, FDA interactions, submissions, and MLR strategy.
Chief Compliance Officer – US
Chief Compliance Officer building SEC registration, policies, and governance for Allocator One’s private-markets fund platform. Advising fund structuring and GP onboarding across Infra One’s US operating platform.
Compliance & Certifications Associate
Compliance associate building ISO 27001, SOC 2, governance, and vendor-risk processes for Credibur’s non-bank lending platform. Supporting regulatory reporting and legal operations as the fintech scales.
Compliance Specialist – RIA
Compliance Specialist reviewing investor-facing marketing and administering AI governance for Ritholtz Wealth Management, a registered investment advisory firm. Supporting regulatory testing, vendor due diligence, books and records, and compliance operations.
Associate Director – Ethics & Compliance, Post Government Employment, COI Review
Associate Director leading ethics, compliance, and conflict-of-interest reviews for RTX, a global aerospace and defense company. Advising leaders, improving compliance programs, and managing post-government employment restrictions across Collins Aerospace.
Senior Governance, Risk, Compliance Analyst
Senior GRC Analyst evaluating cybersecurity controls, privacy, and enterprise risk for Arctic Wolf’s security operations platform. Leading assurance reviews and compliance improvements across global cross-functional teams.
Associate Director – Ethics & Compliance, Post Government Employment and COI Review
Associate Director leading ethics, compliance, conflict-of-interest, and post-government employment reviews at RTX, an aerospace and defense company. Advising leaders, improving compliance processes, and analyzing enterprise risk trends.
Senior Compliance Analyst
Senior Compliance Analyst investigating suspicious activity and high-risk customers for NALA, a global consumer and B2B payments company. Leading SARs, regulatory responses, transaction analysis, and financial crime risk controls.
Software Compliance and Legalization Promotion Specialist
Software compliance specialist promoting licensing compliance and anti-piracy for Ruvixx, a San Francisco SaaS platform protecting intellectual property and brands. Communicating with customers and supporting compliance strategy execution.
Director, Regulatory Response and Examination Management
Director leading regulatory examinations, inquiries, and enforcement responses for SunStrong Management’s solar asset portfolios. Building scalable readiness, documentation, compliance, and remediation programs.