GRC Engineering Senior Manager

GRC Engineering Senior Manager

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field.
• 10+ years of experience in Technology, Cybersecurity, Risk Management, or related engineering functions.
• 5+ years of people management experience, with demonstrated ability to lead technical teams.
• Strong understanding of GRC domains including IT risk, compliance, audit, and policy management.
• Proven experience with GRC & Resilience planning tools.
• Experience in systems integration, automation (e.g., APIs, RPA), and data/reporting tools (e.g., Power BI, Tableau).
• Excellent interpersonal and communication skills, with the ability to influence across all levels of the organization.
• Strong understanding of GRC frameworks such as NIST, ISO 27001, SOC 2, SOX, or CIS Controls.
• Experience working in a highly regulated or fast-paced industry (e.g., financial services, technology, gaming, healthcare).

Responsibilities

• Own the strategy, roadmap, and lifecycle management of GRC tooling, including third-party platforms and custom-built solutions.
• Partner with engineering and product teams to embed GRC controls early in the SDL, fostering a culture of proactive risk management and secure-by-design thinking.
• Identify opportunities for automation and integration of risk and compliance activities within engineering and business workflows.
• Lead the design and development of new tools to improve risk visibility, policy adherence, auditability, and control implementation across Technology.
• Foster a mindset of continuous improvement by identifying and acting on feedback and new requirements from internal stakeholders.
• Drive the adoption of self-service data and reporting tools across the GRC team and its stakeholders.
• Build, lead, and mentor a high-performing team of engineers.
• Set clear performance expectations, provide continuous coaching, and foster a culture of innovation, collaboration, and excellence.
• Partner with internal stakeholders to define and produce meaningful dashboards, reports, and insights that inform risk posture and control effectiveness.
• Ensure GRC technology stack aligns with enterprise architecture standards, data governance policies, and security best practices.
• Translate business and compliance requirements into technical solutions that drive measurable impact.
• Stay current with emerging GRC technologies, frameworks, and regulatory expectations.
• Support other GRC initiatives and ad-hoc requests for program updates and presentations, or other related tasks as needed.

Preferred Qualifications

• Certifications such as CISSP, CISM, or CRISC are a plus.