Governance, Risk & Compliance (GRC) Sr. Manager

Job Summary

Governance, Risk Compliance (GRC) Sr. Manager Operations Key Responsibilities Operate as a core member of the Operations team. Drive adoption of security best practices, standards, and regulatory requirements. Create and enforce enterprise security policies, procedures, and standards. Manage and coordinate internal and external vulnerability assessments and penetration testing. Conduct supplier and third-party security risk assessments. Review and support negotiation of information security clauses in commercial, procurement, and partner agreements. Act as the liaison between Security, Legal, Cloud, Engineering, Corporate IT, Sales, and other teams. Collaborate across datacenters, labs, and remote offices. Stay current with regulatory requirements and industry best practices. Participate in incident response and recovery activities. Respond to customer security and compliance inquiries.

Responsibilities

• Operate as a core member of the Operations team.
• Drive adoption of security best practices, standards, and regulatory requirements.
• Create and enforce enterprise security policies, procedures, and standards.
• Manage and coordinate internal and external vulnerability assessments and penetration testing.
• Conduct supplier and third-party security risk assessments.
• Review and support negotiation of information security clauses in commercial, procurement, and partner agreements.
• Act as the liaison between Security, Legal, Cloud, Engineering, Corporate IT, Sales, and other teams.
• Collaborate across datacenters, labs, and remote offices.
• Stay current with regulatory requirements and industry best practices.
• Participate in incident response and recovery activities.
• Respond to customer security and compliance inquiries.

Qualifications / Requirements

• Strong experience in Governance, Risk Compliance.
• Experience partnering with Legal teams on regulatory and compliance matters.
• Hands-on experience with GRC platforms such as Vanta, Drata, or similar tools.
• Professional certifications such as CISSP, CISM, or CISA.
• Bachelors degree in Computer Science or related technical discipline (or equivalent experience).
• Proven experience building and implementing GRC programs.
• Strong written and verbal communication skills.
• Experience performing supplier and data processor security assessments.
• Experience managing compliance frameworks including: NIST CSF ISO 27001 SOC 2 Type II GDPR HIPAA Related regulatory frameworks.
• Strong analytical and problem-solving capabilities.
• Familiarity with cloud security environments (GCP, Vanta, etc.).
• Familiarity with Unix/Linux environments.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.