Manager, Governance Risk & Compliance (GRC)
Core
Lead the day-to-day execution and operation of the Governance, Risk, and Compliance (GRC) program, managing enterprise risk reviews, third-party risk assessments, and secure development lifecycle (SSDLC) activities.
Role type
Manager, Governance Risk & Compliance (GRC)
Builds
Enterprise risk registers, compliance dashboards, and operational resilience frameworks
Domain
Technology, Cybersecurity, and Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure | physical/clinical work
Required skills
GRC program leadership, third-party/vendor risk assessment, SSDLC risk assessments, security and privacy frameworks (ISO 27001, SOC 2, NIST CSF, HIPAA, GDPR, PCI DSS), enterprise risk management, audit support, policy management, stakeholder coordination
Preferred skills
CISSP, CRISC, CISA, ISO 27001 Lead Auditor, HITRUST CCSFP certifications, project management, program management
Technologies
ISO 27001, SOC 2, NIST CSF, HIPAA, GDPR, PCI DSS
Responsibilities
Lead enterprise risk reviews and triage GRC intake requests, manage the third-party risk management lifecycle including vendor due diligence, develop and report operational metrics and KPIs via weekly dashboards, contribute to governance activities including policy management and audit support, maintain the enterprise risk register, support security incident response activities
Seniority
Manager, hands-on IC with team leadership
