Senior Compliance and Risk Manager

Job Summary

To support the ongoing maturity of the Governance, Risk, and Compliance program, the full-time remote Senior Compliance and Risk Manager will manage third-party risk, respond to customer RFPs and security questionnaires, and oversee compliance with security and privacy regulations while leading audit readiness and control testing initiatives.

Key responsibilities

• Monitor organizational compliance with internal policies and external regulations, preparing regular compliance status reports for leadership
• Define and manage the third-party risk management program, including vendor security assessments and ongoing monitoring of vendor risk
• Lead and coordinate audits and assessments across the compliance portfolio, managing external audits end-to-end and ensuring audit readiness

Required qualifications

• Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience)
• 8+ years of experience in GRC, information security compliance, IT audit, or enterprise/vendor risk management
• Hands-on experience leading or supporting audits against major frameworks such as ISO 27001, NIST, and SOC 2
• Demonstrated experience managing external audits end-to-end, including auditor relationships and finding remediation
• Solid understanding of risk assessment methodologies and control frameworks, such as COBIT