Security GRC Program Manager

Security GRC Program Manager
Location: Remote (U.S.)
Pay: $80-85/Hr (W2)
Duration: Initial 6-month contract (expected extension/conversion)
Schedule: Full-time, 40 hrs/week (Mon–Fri)
Target Start: May 02026
Benefits: Medical, dental, vision, 401(k), paid vacation & sick leave

Job Overview:

Security Governance, Risk, and Compliance (GRC) Program Manager

Seeking a highly experienced Security GRC Program Manager to join our Risk Organization, focusing on the Governance, Risk, and Compliance (GRC) pillar. This senior individual contributor role is crucial for providing second-line oversight of security risk management and compliance across diverse business units, regulatory landscapes, and governance forums.

The Risk Organization is responsible for second-line oversight of security risk management and compliance. The Security GRC pillar focuses on governance, risk, and compliance across diverse business units and regulatory landscapes. The team operates with a unified security framework, emphasizing protection against top risks, maturing security capabilities at scale, and enabling secure business agility. Members collaborate closely with stakeholders across the company, shaping security posture and ensuring alignment with global regulations and business objectives.

The role involves an initial ramp-up phase. The successful candidate will join a team of 7-8 and will be expected to complete tasks effectively, integrate well within the team, demonstrate creative problem-solving ("think outside the box"), and maintain adaptability.

Ideal candidate profile:

• Cybersecurity expertise
• Deep knowledge of internal risk and compliance
• Experience with Governance, Risk, and Compliance (GRC) frameworks
• Well-rounded experience/ Risk and compliance

Responsibilities:

• Strategic Leadership: Drive strategic risk initiatives, proactively identify and resolve complex, ambiguous problems, and establish a clear vision for the team and organization.
• Influence and Advocacy: Influence high-level outcomes, cultivate strong internal networks, and champion security risk management innovation and best practices.
• Program Alignment: Operate within and support unified Security GRC program, ensuring alignment with canonical security framework and the three core principles:

1. Protecting against top security risks.
2. Maturing core security capabilities at scale.
3. Enabling the company to move fast securely.

• Autonomy and Collaboration: Operate with significant autonomy, regularly leading cross-functional initiatives and driving company-wide impact through thought leadership and strategic execution.
• Shaping Security Posture: Shape security risk posture, collaborate with leaders across Security, Product, Engineering, and Legal, and ensure global regulatory requirements and business objectives are met.

Essential Qualifications:

• 10+ years of experience
• In-depth knowledge of cybersecurity/GRC standards.
• Experience building controls and automation.

Must-Have Skills:

1. Deep Knowledge of Cybersecurity/GRC Standards
2. Experience Building Controls and Automation
3. Strategic Leadership & Cross-Functional Influence

Nice-to-Have Skills:

1. Regulatory Compliance Expertise
2. Program Management in Large Tech Organizations
3. Strong Internal Networking & Advocacy

Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Los Angeles Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, qualified applicants will be considered for assignment with arrest and conviction records. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, meet client expectations, standards, and accompanying requirements, and safeguard business operations and company reputation.