Senior Project Manager, GRC – Governance Risk and Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of the complete delivery of remediation projects related to SOC 2, ITGC, and regulatory compliance requirements.

• Convert audit findings, control deficiencies, and new regulatory demands into defined plans, milestones, and designated owners.

• Drive remediation projects to successful completion.

• Oversee 2 to 4 simultaneous projects across security, legal, compliance, finance, or other departments.

• Maintain project plans that include tracked risks, issues, and dependencies.

• Escalate obstacles before they impact timelines.

• Interpret security and compliance requirements into actionable tasks for engineering and technical teams.

• Utilize Agile, waterfall, or hybrid methodologies as necessary.

• Assist in the annual risk assessment cycle and ongoing compliance programs.

• Maintain schedules, coordinate stakeholder input and deadlines, ensuring timely deliverables.

• Monitor and report on risk treatment plans across owners and due dates.

• Keep project and risk-tracking data updated in project management or GRC/IRM platforms.

• Collaborate with external auditors to ensure that remediation deliverables align with audit requirements.

• Act as the primary contact for remediation and project status updates among business stakeholders.

• Develop and sustain leadership-facing reports and dashboards.

• Provide status updates and escalate risks to executive leadership and governance forums.

• Facilitate project meetings and working sessions.

• Document decisions and action items, tracking them to completion.

• Enhance project management and tracking processes, templates, and tools.

• Assist in improving GRC's intake, prioritization, and resource allocation approach.

⛳️ Requirements

• Minimum of 6 years of project management experience, including leading complex, cross-functional projects.

• At least 2 years of experience managing remediation projects related to security, compliance, or regulatory findings is strongly preferred.

• Proficient in translating Compliance & Security requirements into technical tasks and managing requirements traceability throughout delivery.

• Proven experience in creating leadership-facing reports and dashboards to monitor project, remediation, or risk status.

• Knowledge of frameworks such as SOC 2, ITGC, or similar regulatory and compliance standards.

• Working technical knowledge in discussing cloud infrastructure, APIs, the software development lifecycle, and essential security concepts.

• Demonstrated experience managing multiple concurrent projects with conflicting deadlines and stakeholders.

• Strong expertise in Agile, waterfall, or hybrid project management methodologies.

• Proficient with tools such as Jira, MS Project, or similar.

• Excellent verbal communication skills, including experience presenting to executive audiences.

• Experience in written executive communication is preferred.

• Familiarity with GRC/IRM platforms (e.g., Optro) is preferred.

• PMP, CAPM, or an equivalent project management certification is preferred.

• Security certifications (Security+, CISA, CISSP) are preferred.

• Experience in the insurance, fintech, or another regulated sector is preferred.

• Must have authorization to work in the United States without current or future visa sponsorship.

🏝️ Benefits

• Fully remote work environment.

• Health insurance provided through Aetna (100% of premiums covered).

• Dental and vision insurance through Guardian (100% of premiums covered).

• Basic life insurance (100% of premiums covered).

• Access to flexible spending accounts (FSA) or health savings accounts (HSA).

• 401K plan with up to a 4% match and immediate vesting.

• Flexible PTO policy allowing employees up to 4 weeks of PTO in their first 12 months.

• PTO usage typically does not exceed 5 weeks per calendar year thereafter.

• 12 company-paid holidays each year.

• Annual stipend for continuing education.