GRC Program Manager

Requirements

• Experience: 4+ years in GRC, compliance, security operations, or audit roles, with demonstrated experience owning at least one compliance framework or security operations program end-to-end (scoping, control design, audit coordination, certification)
• Deep knowledge of governance frameworks (ISO 27001, SOC 2) and data privacy regulations (GDPR, CCPA), with the ability to interpret requirements and design practical control implementations
• Experience managing external auditor relationships and driving audits to completion independently
• Strong stakeholder management skills—you can coordinate across technical and non-technical teams, hold people accountable, and resolve conflicts without escalation
• Ability to design control mappings and assessment methodologies, not just execute predefined checklists
• Experience configuring GRC platforms and designing automated compliance workflows— you think in systems, not spread...