GRC Program Manager

Job Summary

To ensure compliance with cyber laws and regulations, the full-time remote GRC Program Manager will design, implement, and govern cyber risk management programs, including user attestations and third-party risk management, while collaborating with internal and external stakeholders.

Key responsibilities

• Define program goals and governance frameworks while designing and executing programs aligned with business strategies
• Implement and manage a GRC tool to oversee cyber risk management activities and ensure adherence to compliance deadlines
• Collaborate with cross-functional teams and external auditors to assess and mitigate cyber risks, adapting programs to emerging threats and regulatory changes

Required qualifications

• Eight years of relevant experience in cyber GRC, technology controls consulting, or cyber risk management
• At least five years in a GRC program manager or equivalent role focused on information security and technology compliance
• Experience implementing GRC tools such as Optro, Vanta, Drata, or OneTrust
• Background in Financial Services, Fintech, or SaaS environments is highly preferred