Senior Manager, IT Governance

Job Summary

Leading the IT Governance, Risk, Compliance (GRC), and Privacy function for a global software organization, the full-time Senior Manager, IT Governance will manage enterprise risk governance, audit readiness, and compliance operations while guiding a small team and reporting to the Head of Cybersecurity and Privacy.

Key responsibilities

• Oversee the creation and enforcement of IT policies, standards, and procedures across the organization
• Manage the enterprise IT risk register and third-party risk assessment processes, ensuring timely reporting and follow-up
• Coordinate compliance efforts for various frameworks and lead the documentation and testing of control effectiveness

Required qualifications

• 12+ years of experience in IT GRC, information security, or related fields
• Hands-on experience with GRC tools/software and workflow design
• In-depth knowledge of NIST, ISO, GDPR, and SOC2 frameworks
• Proven ability to communicate complex compliance and risk topics to diverse stakeholders
• Active professional certification(s) in information security or risk management (e.g., CISA, CISSP)