Risk & Controls Manager
Core
Risk and controls advisor ensuring adherence to compliance frameworks and evaluating business initiatives for regulatory alignment.
Role type
Senior GRC Manager (Privacy, Third-Party Risk, Policy)
Builds
Privacy program, third-party risk management processes, and organizational policy management
Domain
SaaS, Information Security, Compliance
Required skills
Compliance frameworks (SOC, ISO), Privacy regulations (GDPR, CCPA), Third-party risk management, Policy management, Issue tracking and remediation, Process automation
Preferred skills
SaaS industry experience, Cloud hosting environments (AWS, Azure, GCP), AI-driven workflow development, International compliance initiatives
Technologies
SOC, ISO, GDPR, CCPA, AWS, Azure, GCP
Responsibilities
Collaborate with stakeholders to align documentation with audit expectations; Conduct compliance impact assessments for risk, privacy, and AI; Provide strategic guidance on compliance inquiries; Ensure adherence to SOC and ISO standards; Own privacy program execution including data subject requests; Manage sub-processor program and vendor reviews; Own third-party risk due diligence; Manage policy lifecycle and version control; Track and remediate compliance issues; Identify and implement process automation opportunities.
Seniority
Senior, hands-on IC
