GRC Program Manager - Remote

Responsibilities

• Define program goals and governance frameworks for compliance and risk management
• Design and execute compliance programs aligning with business objectives
• Oversee planning and scheduling of user attestations across the enterprise
• Assess and consult on third-party cyber risks and negotiate related contracts
• Cook up IT aspects of audits and assessments, ensuring compliance with frameworks such as SOC1/2 and PCI DSS
• Coordinate with employees to educate them on risk mitigation roles and program objectives to gain support
• Adapt programs to handle emerging cybersecurity threats and regulatory changes

Qualifications

• 8+ years in cyber GRC, technology controls consulting, and IT auditing or risk management
• 5+ years in a GRC program manager or similar role with a focus on risk mitigation
• Familiarity with tracking and implementation of GRC tools like Optro, Vanta, or OneTrust
• Experience with PCI and NIST CSF assessments
• Background in Financial Services, Fintech, or SaaS environments is preferred

Benefits

• Competitive wages
• Medical coverage including telemedicine
• Dental and vision insurance
• Paid Time Off (PTO) and community volunteer time
• Maternity and parental leave
• 401k plan with employer matching
• Mental health and wellness support programs