GRC Program Manager

This is a fully remote position, open to applicants in Germany.

📋 Description

• Oversee the complete execution and accountability of GRC deliverables, timelines, dependencies, and compliance milestones.

• Direct third-party audits such as SOC 2 Type II and PCI DSS from initial scoping to final completion.

• Manage the collection of evidence, provide guidance to control owners, and spearhead remediation initiatives.

• Develop and enhance compliance frameworks to meet evolving global standards, including GDPR.

• Perform IT, security, and third-party risk assessments.

• Maintain the risk register and monitor risk treatment plans and corrective actions until resolution.

• Improve GRC operations utilizing GRC platforms and automation tools.

• Collaborate with Engineering and Product teams to integrate security controls, privacy-by-design, and cloud best practices into the development lifecycle and API-first platform.

• Assist enterprise sales by responding to security questionnaires, conducting third-party risk reviews, and demonstrating compliance.

• Convert technical and regulatory findings into risk dashboards, Key Risk Indicators (KRIs), and updates for leadership.

⛳️ Requirements

• Proven experience in leading cross-functional projects, aligning technical and business stakeholders, and ensuring team accountability.

• Hands-on expertise in spearheading significant compliance audits such as SOC 2, PCI DSS, or ISO 27001 from inception to completion.

• Previous experience in SaaS, Fintech, or cloud-native technology environments is highly desirable.

• A strong sense of curiosity and a quick-learning ability towards modern cloud, API, and SaaS architectures are essential for candidates transitioning from other sectors.

• Demonstrated experience in GRC and security processes, including risk assessments, internal audits, policy formulation, and management of corrective actions.

• Solid understanding of SOC 2, PCI DSS, ISO 27001, GDPR, and NIST CSF/RMF.

• Capability to translate regulatory requirements into actionable operational steps.

• Effective communication skills with both technical experts and business executives.

• Proficiency in English for business communication is required.

• Basic technical knowledge of scripting, APIs, or system logs/configurations is advantageous.

• Familiarity with GRC automation tools such as Vanta, Drata, ServiceNow IRM, or LogicGate is a plus.

• Relevant certifications such as CRISC, CISA, CISM, CISSP, CSSP, or ISO/IEC 27001 Lead Auditor are beneficial.

• Proficiency in the German language is an added advantage.

🏝️ Benefits

• Play a mission-critical role supporting global live entertainment brands.

• Continuous investment in personnel, products, and long-term vision.

• Collaborate with a diverse team of over 160 individuals, including leaders from Google, Slack, and Salesforce.

• Join a merit-driven global team operating across six offices.

• Experience daily learning, shared achievements, and collective growth.

• Opportunity to engage with recognized technology leaders and award-winning professionals.

• Benefit from an inclusive workplace dedicated to empowerment, contribution, growth, and thriving.

• Work with a profitable, VC-backed company that has secured over $65 million in funding.