at the company, were reinventing devsecops to help the worlds greatest companies innovate. our team of industry-leading software security experts is a true pioneer, constantly pushing the boundaries with original research and technological innovation. we are a special place with a unique combination of brilliance, spirit, and just all-around great people. thousands of customers, including the majority of the fortune 100, trust the company to manage, accelerate, and secure their software delivery from code to production - a concept we call liquid software. wouldn't it be amazing if you could join us on our journey?
we are seeking an experienced grc manager (governance, risk, and compliance) to lead and mature key areas of the company's global governance, risk, and compliance program. ``in this role, you will manage members of the grc team, including the grc specialist, and be responsible for driving the company's corporate compliance, customer assurance, risk management, audit readiness, and trust programs. the grc manager will work closely with security, it, legal, privacy, sales, r&d, finance, internal audit, and other business stakeholders to ensure the company maintains a scalable, risk-based compliance program that supports both regulatory obligations and customer expectations. the ideal candidate combines strong cybersecurity and compliance expertise with leadership, business judgment, project management, and the ability to translate complex compliance requirements into practical business solutions.
as a grc manager at the company, you will...
lead and develop grc team members, including the grc specialist, by establishing priorities, providing guidance, reviewing deliverables, and supporting professional development.
own and mature key components of the company's global grc program, ensuring that governance, policies, controls, risk-management activities, and compliance processes remain effective and scalable as the company grows.
manage and support security certifications, attestations, and compliance programs, including iso 27001, SOC 2 type ii, and other applicable industry and regulatory frameworks.
lead internal and external audit activities, coordinating evidence collection, stakeholder participation, remediation activities, and responses to auditors, assessors, customers, and other external parties.
lead and mature the third-party risk management (tprm) program, overseeing third-party security assessments, risk identification and treatment, remediation tracking, risk acceptance, ongoing monitoring, and reporting to ensure third-party risks are appropriately identified and managed.
drive policy and control governance, ensuring the company policies, procedures, standards, and controls remain aligned with applicable regulatory requirements, contractual commitments, business objectives, and industry best practices.
partner with sales and customer-facing organizations to improve compliance enablement, develop reusable resources, and help the customer trust team efficiently respond to security and compliance requirements from prospective and existing customers.
identify opportunities to automate and scale grc processes, including the use of grc platforms, trust-center technologies, workflow automation, and ai-enabled solutions.
monitor regulatory, industry, and customer-driven changes and assess their potential impact on the company's compliance obligations, controls, and grc roadmap.
establish and track grc metrics and kpis, providing management with visibility into compliance posture, audit findings, customer assurance activities, risks, remediation efforts, and program maturity.
drive remediation efforts across the organization, working with control owners to ensure that identified gaps, audit findings, risks, and corrective actions are appropriately prioritized and resolved.
serve as a trusted grc advisor to business and technical stakeholders, translating complex regulatory and compliance.
This position is open to all candidates.