Sr Risk and Compliance Manager

About the role

The Senior Risk & Compliance senior individual contributor is responsible for designing, enabling, and continuously improving GTI’s First Line of Defense risk and compliance capabilities. This role combines risk and regulatory expertise with a technical, engineering-oriented approach to governance, risk, and compliance (GRC), translating regulatory requirements, policies, risks, and control obligations into scalable processes, control requirements, automated workflows, monitoring, and measurable outcomes. The role works directly with Product, Engineering, Operations, Security, Enterprise Risk Management, Compliance, Legal, and Internal Audit to integrate risk and compliance requirements into technology processes and platforms rather than relying primarily on manual governance activities. The successful candidate will be equally comfortable evaluating risk, challenging control design, analyzing data, defining technical requirements, and partnering with operations teams to automate evidence, controls, testing, monitoring, and reporting wherever practical. The position operates through technical expertise, independent judgment, and influence.

Responsibilities

• Own and lead the Risk Framework while engineering scalable controls, automated workflows, monitoring, and measurable risk reduction.
• Lead risk assessments, issue management, remediation, risk acceptance, operational loss analysis, and control effectiveness assessments.
• Translate regulatory, policy, risk, and compliance requirements into practical business, technology, control, evidence, and monitoring requirements.
• Design, test, challenge, and continuously improve preventive and detective controls, replacing manual controls with automated controls where practical. Automate control execution, evidence collection, testing, monitoring, exception management, reporting, and compliance checks.
• Partner with business, Product, Engineering, Operations, Security, Compliance, Legal, ERM, and Internal Audit to embed risk and compliance into technology and business processes.
• Identify emerging operational, technology, security, privacy, regulatory, compliance, and resilience risks and drive appropriate remediation.
• Use data, KPIs, KRIs, dashboards, and control-health measures to improve risk visibility, reporting, and decision-making.
• Lead risk-based testing and validate that remediation and implemented solutions sufficiently address identified risks.
• Evaluate governance processes for simplification, standardization, improvement, or automation.
• Provide senior risk and compliance advisory support while directly challenging control design and influencing technology and business decisions.
• Support executive and Board reporting while reducing reliance on manually prepared governance reporting.
• Operate as a senior individual contributor and trusted risk SME, using technical expertise, independent judgment, influence, and cross-functional leadership.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Engineering, Risk Management, Compliance, Business, or a related field, or equivalent experience.
• 10+ years of experience across technology risk, GRC, cybersecurity, compliance, audit, engineering, or related disciplines.
• Strong experience with risk and control assessments, control mapping, control testing, and remediation.
• Experience translating regulatory or policy requirements into technology and control requirements.
• Demonstrated experience automating governance, risk, security, or compliance processes.
• Strong understanding of technology systems, software development, cloud environments, and operational processes.
• Ability to analyze data and use it to identify risk, control gaps, and compliance exceptions.
• Ability to work directly with engineers, architects, product teams, security professionals, and executives.
• Demonstrated ability to operate independently as a senior subject-matter expert.

Preferred Qualifications

• Experience implementing or supporting GRC automation, compliance automation, or continuous control monitoring.
• Experience with workflow automation, APIs, data analytics, or similar integration concepts.
• Familiarity with cloud and DevOps operating models.
• Experience with compliance and control frameworks and crosswalks.
• Experience with PCI, SWIFT, ISO, DORA, or comparable regulatory and industry requirements.
• Experience with AI-enabled governance or automation capabilities.
• Experience establishing automated KPIs, KRIs, and control-health reporting.
• CRISC, CISA, CISM, CISSP, PCI ISA, or comparable certification.

Core Competencies

• Ability to design and continuously improve processes
• Strong communication skills across all organizational levels
• Ability to influence and challenge stakeholders effectively
• Skilled in prioritization, decision-making, and conflict resolution
• Experience presenting to senior leadership and boards
• Capacity to operate effectively in ambiguous environments and drive clarity

Work Environment

Hybrid office-based role. Majority of time spent working on a computer. Minimal travel requirement (less than 10%). Applicants must be currently authorized to work in the United States on a full-time basis; this position does not offer sponsorship for employment visa status or work permit now or in the future.