Senior IT Governance & Compliance Manager
Core
Principal subject matter expert driving enterprise security and compliance posture, embedding risk-aware thinking across the business while streamlining audit readiness and vendor risk operations.
Role type
Senior IT Governance & Compliance Manager (Principal IC)
Builds
Enterprise security policies, TPRM programs, and audit readiness for SOC 2/ISO 27001
Domain
IT Governance, Risk, and Compliance (GRC) / Cybersecurity
Required skills
IT GRC framework management, Third-Party Risk Management (TPRM), AI tool integration, Strategic advisory, Audit execution, Policy authoring
Preferred skills
CISA/CRISC/CISM/CISSP certification, Modern GRC platform administration, AI governance frameworks (NIST AI RMF, ISO 42001), Cloud-native risk evaluation
Technologies
SOC 2 Type II, ISO 27001, NIST CSF, GDPR, CCPA, LogicGate Risk Cloud, AWS
Responsibilities
Drive maturity of IT GRC frameworks, Own and scale TPRM program, Partner with Sales on enterprise security inquiries, Provide expert guidance on cybersecurity contracts, Lead internal and external audit execution, Author and enforce enterprise security policies
Seniority
Senior, hands-on IC