…The vulnerability management and security operations programs sit right at the intersection of security engineering, infrastructure, and GRC, and they're foundational to how…

…cloud configuration risk. - Manage small-to-moderate initiatives that span multiple stakeholders (Infrastructure peers, infrastructure teams, product engineering, compliance, GRC, procurement). - Own the squad…

…Integrated Risk Management (IRM), Automated Risk Management with AI/ML-Driven Assessment, Approval, and Mitigation, Global & Conversational Search UX for Holistic GRC Insights, Smart…

…including HIPAA where relevant - Experience managing or mentoring compliance, audit, or GRC professionals - Demonstrated experience leading operational GRC programs, including workload prioritization, KPI reporting…

…ongoing risk management program at GRC in a fast-paced, high-growth environment. This role is responsible for operations of GRC initiatives - including but…

…This role is responsible for operations of GRC initiatives - including but not limited to structured cybersecurity and AI risk assessments, exceptions management, SDLC reviews…

Drata is building the trust layer between great companies - automating compliance, managing risk, and helping organizations prove trust continuously as they scale. We're…

…IN THIS ROLE YOU WILL GET TO: - Help to scope security related feature enhancements on behalf of customers to work with Product Management and…

…Nice to Have - You've led or developed a meaningful component of a security program (detection & response, security architecture, platform/tooling, vulnerability management, GRC…

…Project management and stakeholder coordination skills: Experience managing complex, multi-month compliance programs with multiple dependencies, stakeholders, and tight deadlines. Technical foundation in cloud…

…The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information…

…You'll deliver with exceptional attention to detail, ensuring accuracy across every aspect of security management while maintaining the momentum the programme demands. You…

…risk management, policy lifecycle management, supply chain risk, AI risk, and controls programs. You will have the opportunity to shape how GRC operates at…

…of the risk programme that turn policy and standards into measured, monitored, and automated risk decisions. Reporting to the Senior Manager, Security Risk Engineering…

…program management, GRC, or technical auditing within enterprise SaaS, cloud-native, or cybersecurity environments Proven track record driving large-scale, multi-framework certification programs…

…operational risk programs. - Demonstrated track record of building and operating scalable risk operational programs: controls assurance, third-party risk management, issue management, or incident…

…senior management and relevant governance bodies - Leverage GRC tooling and data analytics to support risk monitoring, reporting, and the automation of risk program activities…

…management). - Familiarity with IT service management or GRC tooling. - Exposure to scaled Agile frameworks (e.g., SAFe) in a multi-team or program-level…

…Experience managing security and compliance programs across broad GRC disciplines within a complex, global public company environment. Experience solving complex, systemic issues that require…

…priorities, and program progress QUALIFICATIONS: - 10+ years of experience in information security, security engineering, or security operations, including 5+ years managing managers and senior…

…programs, ensuring they not only meet regulatory standards but also enhance trust and confidence among our customers and stakeholders. As the EU GRC Manager…

…As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than…

…You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make…

…Drive cross-functional delivery with engineering, platform, and identity teams without direct authority. - Integration with GRC and Partner Functions: Ensure the access management program…

…You’ll collaborate closely with Cloud Security, Compliance/GRC, SRE, Platform Engineering, IT/Endpoint teams, and AI Infrastructure to ensure our detection strategy scales…