Manager, Governance, Risk & Compliance

Doppel

. Define and execute the multi-year GRC strategy and roadmap; set priorities, budget, tooling, KPIs, and report program health, risk posture, and audit readiness to the CISO and executive leadership.

Posted 9/16/2026full-timeRemote • United StatesSeniorLead💰 $170,000 - $190,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Governance, Risk, and Compliance (GRC) strategy execution, team leadership, and risk management frameworks. Proficient in managing compliance programs, conducting audits, and ensuring adherence to industry standards such as SOC 2 and ISO certifications.

Highest-signal resume keywords

GRC Strategy DevelopmentSOC 2 Type II OwnershipISO 27001 Certification ManagementEnterprise Risk ManagementAccess Governance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

GRC Program ManagementRisk AssessmentControl Framework DesignAudit ReadinessCompliance MonitoringData Privacy ManagementIncident Response PlanningVendor Risk ManagementCloud Security ComplianceContinuous Improvement

Soft Skills

Executive CommunicationTeam LeadershipCoaching and DevelopmentStakeholder EngagementPerformance Management

Tools & Technologies

GRC ToolingCloud Platforms (AWS/Azure/GCP)Automation ToolsRisk Management SoftwareCompliance Management Systems

Certifications & Qualifications

CISACISSPCISMCRISCISO 27001 Lead AuditorCIPPCIPM

Industry Keywords

ISO 27701ISO 42001NISTGDPRCPRAPCIHIPAATrust Services CriteriaData MappingPrivacy Operations

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Define and execute the multi-year GRC strategy and roadmap; set priorities, budget, tooling, KPIs, and report program health, risk posture, and audit readiness to the CISO and executive leadership.
Hire, manage, coach, and develop a team of GRC analysts; set goals and career paths, run performance reviews, delegate framework and workstream ownership, and build a culture of rigor and continuous improvement.
Serve as executive owner for SOC 2 Type II, ISO 27001, ISO 27701, ISO 42001, and future frameworks; direct audit scoping, readiness assessments, remediation, evidence strategy, auditor relationships, and management review cycles.
Own enterprise and security risk frameworks, risk appetite, risk registers, risk review forums, assessments, escalation, remediation, and formal risk acceptance.
Design the common control framework and continuous-monitoring approach mapping ISO, SOC 2, NIST, GDPR/CPRA, PCI, and HIPAA/HITRUST; oversee testing, exceptions, and corrective actions.
Own access governance, including access certifications, least-privilege standards, joiner/mover/leaver controls, and privileged access monitoring.
Set vendor risk strategy and tiering; oversee due diligence, contractual security and privacy requirements, and monitoring of critical suppliers, partners, and AI service providers.
Lead customer trust activities including security and privacy questionnaires, RFP responses, Trust Center content, and customer-facing security reviews; partner with Sales on enterprise deals.
Own policy and standards lifecycle, security and privacy awareness and role-based training, and privacy operations including DPIAs, data mapping, and data subject requests.
Sponsor incident response tabletop exercises and business continuity/disaster recovery testing; deliver executive and board-level dashboards.
Lead responsible AI governance under ISO 42001 and emerging regulation such as the EU AI Act, partnering with Product and Engineering.

Requirements

What you’ll need

8+ years in GRC, security audit, or risk management, with at least 1 year managing people and owning a GRC or compliance program end to end.
Track record hiring, developing, and retaining high-performing GRC professionals, and of scaling a program and team through rapid company growth.
Executive-level ownership of SOC 2 Type II and ISO 27001 programs through multiple certification and surveillance cycles, including scoping, auditor selection and management, and remediation.
Hands-on experience with ISO 27701 and ISO 42001 or equivalent privacy and AI governance programs.
Deep command of management systems (ISMS/PIMS/AIMS), Trust Services Criteria, common control frameworks, control testing, sampling, and evidence sufficiency in cloud-first environments (AWS/Azure/GCP, SaaS).
Experience designing and operating enterprise risk management, including risk appetite, risk registers, risk forums, and formal risk acceptance with senior leadership.
Proven ability to run access certifications, third-party risk management, and customer security reviews at enterprise scale, and to select and implement GRC tooling and automation.
Strong executive communication skills: comfortable presenting risk and compliance posture to leadership, boards, auditors, and enterprise customers, and translating technical detail into business impact.
Relevant certifications such as CISA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or CIPP/CIPM are a plus.

Benefits

Comp & perks

🌐 Worldwide ❌ Jobs You've Hidden ⭐️ Saved Jobs ✅ Applied Jobs ✉️ Email Alerts 👤 Account Doppel Website LinkedIn All Job Openings 201 - 500 employees Founded 2022 🔒 Cybersecurity 🤖 Artificial Intelligence ☁️ SaaS Cybersecurity
Artificial Intelligence
SaaS Doppel is an AI-native social engineering defense platform that protects organizations from AI-powered impersonation, phishing, deepfakes and multi-channel social engineering attacks. The platform unifies Digital Risk Protection, Human Risk Management (simulation and security awareness training), and Email Security to detect, correlate (via a Threat Graph), and remediate attacker infrastructure across domains, social media, ad networks, telco, marketplaces and dark channels. Doppel emphasizes agentic AI automation for detection, takedowns, phishing triage and scalable SOC workflows, and targets enterprise customers across industries such as financial services, healthcare, technology, retail and manufacturing. Manager, Governance, Risk & Compliance Job not on LinkedIn 🔥 4 minutes ago 🇺🇸 United States – Remote 💵 $170k - $190k / year ⏰ Full Time 🟠 Senior 🔴 Lead 🚔 Compliance 👻 Ghost score 0% Apply Now Customize resume + cover letter Report problem ☆ Save ☑️ Mark as applied ❌ Hide 📋 Description
Define and execute the multi-year GRC strategy and roadmap; set priorities, budget, tooling, KPIs, and report program health, risk posture, and audit readiness to the CISO and executive leadership.
Hire, manage, coach, and develop a team of GRC analysts; set goals and career paths, run performance reviews, delegate framework and workstream ownership, and build a culture of rigor and continuous improvement.
Serve as executive owner for SOC 2 Type II, ISO 27001, ISO 27701, ISO 42001, and future frameworks; direct audit scoping, readiness assessments, remediation, evidence strategy, auditor relationships, and management review cycles.
Own enterprise and security risk frameworks, risk appetite, risk registers, risk review forums, assessments, escalation, remediation, and formal risk acceptance.
Design the common control framework and continuous-monitoring approach mapping ISO, SOC 2, NIST, GDPR/CPRA, PCI, and HIPAA/HITRUST; oversee testing, exceptions, and corrective actions.
Own access governance, including access certifications, least-privilege standards, joiner/mover/leaver controls, and privileged access monitoring.
Set vendor risk strategy and tiering; oversee due diligence, contractual security and privacy requirements, and monitoring of critical suppliers, partners, and AI service providers.
Lead customer trust activities including security and privacy questionnaires, RFP responses, Trust Center content, and customer-facing security reviews; partner with Sales on enterprise deals.
Own policy and standards lifecycle, security and privacy awareness and role-based training, and privacy operations including DPIAs, data mapping, and data subject requests.
Sponsor incident response tabletop exercises and business continuity/disaster recovery testing; deliver executive and board-level dashboards.
Lead responsible AI governance under ISO 42001 and emerging regulation such as the EU AI Act, partnering with Product and Engineering. 🎯 Requirements
8+ years in GRC, security audit, or risk management, with at least 1 year managing people and owning a GRC or compliance program end to end.
Track record hiring, developing, and retaining high-performing GRC professionals, and of scaling a program and team through rapid company growth.
Executive-level ownership of SOC 2 Type II and ISO 27001 programs through multiple certification and surveillance cycles, including scoping, auditor selection and management, and remediation.
Hands-on experience with ISO 27701 and ISO 42001 or equivalent privacy and AI governance programs.
Deep command of management systems (ISMS/PIMS/AIMS), Trust Services Criteria, common control frameworks, control testing, sampling, and evidence sufficiency in cloud-first environments (AWS/Azure/GCP, SaaS).
Experience designing and operating enterprise risk management, including risk appetite, risk registers, risk forums, and formal risk acceptance with senior leadership.
Proven ability to run access certifications, third-party risk management, and customer security reviews at enterprise scale, and to select and implement GRC tooling and automation.
Strong executive communication skills: comfortable presenting risk and compliance posture to leadership, boards, auditors, and enterprise customers, and translating technical detail into business impact.
Relevant certifications such as CISA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or CIPP/CIPM are a plus. Apply Now 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score Similar Jobs Compliance Analyst 🔥 59 minutes ago Teleperformance 10,000+ employees 📣 Marketing 📦 Logistics 🏥 Healthcare Website LinkedIn All Job Openings Compliance Analyst supporting TP, a global digital business services provider, through compliance monitoring, audits, reporting, and controls testing. Improving compliance workflows with Google Workspace automation and dashboards. 🇺🇸 United States – Remote 💵 $45k - $55k / year ⏰ Full Time 🟡 Mid-level 🟠 Senior 🚔 Compliance Director, Global Ethics and Compliance Monitoring and Reporting 🔥 3 hours ago Solventum 10,000+ employees 🏥 Healthcare 📦 Logistics 💼 Consulting Website LinkedIn All Job Openings Solventum healthcare compliance director leading global ethics monitoring, reporting, and risk programs. Advising executives and managing enterprise-wide compliance teams, technology, and assessments. 🇺🇸 United States – Remote 💵 $187.6k - $257.9k / year ⏰ Full Time 🔴 Lead 🚔 Compliance Lead, Global Quality Regulatory Intelligence 🔥 7 hours ago Lonza 10,000+ employees 🧬 Biotechnology 💊 Pharmaceuticals 🏭 Manufacturing Website LinkedIn All Job Openings Senior Director leading Lonza’s global quality regulatory intelligence, advocacy, and external engagement. Translating regulatory developments into compliant quality-system actions across life sciences operations. 🇺🇸 United States – Remote 💵 $200k - $243k / year 💰 $444.8M Post-IPO Debt - Lonza on 2023-11 ⏰ Full Time 🟠 Senior 🚔 Compliance Security/Compliance SME 🔥 14 hours ago Koniag Government Services 1001 - 5000 🏛️ Government 🎖️ Defense 💼 Consulting Website LinkedIn All Job Openings Security/compliance SME advancing Department of the Air Force ICAM capabilities for Koniag Government Services. Aligning Zero Trust architectures, ATO processes, and governance studies with DoD policy. 🇺🇸 United States – Remote ⏰ Full Time 🟠 Senior 🔴 Lead 🚔 Compliance Regional Safety, Compliance, Loss Prevention Manager 🔥 21 hours ago Stord 1001 - 5000 🍽️ Food & Beverage 💼 Consulting 📣 Marketing Website LinkedIn All Job Openings Regional HSS and loss prevention manager executing safety, compliance, and asset-protection programs. Supporting Stord’s fulfillment and warehouse operations across a regional network. 🇺🇸 United States – Remote ⏰ Full Time 🟠 Senior 🔴 Lead 🚔 Compliance 🦅 H1B Visa Sponsor View More Compliance Jobs 🌐 Worldwide Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com Search Remote jobs Search Jobs by country Search jobs by city Search jobs by job title Search entry-level jobs Search junior-level jobs Search senior-level jobs Search jobs by tech stack Search jobs by contract type Search remote internships Search remote part-time jobs Remote jobs Anywhere in the World Companies Hiring Anywhere in the World Companies Hiring Sales People Anywhere in the World Companies Hiring Software Engineers Anywhere in the World Resources About us Advice Tips for finding remote jobs Interview questions and answers Resume examples Cover letter examples Post a job Affiliates Is Remote Rocketship legit? Privacy policy Terms of service Job board SEO course Remote Job Search MasterClass Resume Review AI Apply Copilot OpenClaw job finder API docs Find jobs using your resume Jobs by Country Remote jobs anywhere in the world (Worldwide remote jobs) Remote jobs United States Remote jobs Australia Remote jobs Brazil Remote jobs Canada Remote jobs France Remote jobs Ireland Remote jobs Germany Remote jobs Netherlands Remote jobs Spain Remote jobs UK Popular Jobs Remote data analyst jobs Remote customer support jobs Remote executive assistant jobs Remote marketing jobs Remote product designer jobs Remote product manager jobs Remote project manager jobs Remote recruiter jobs Remote sales jobs Remote software engineer jobs Jobs by Type Remote full-time jobs Remote part-time jobs Remote contract jobs Remote internship jobs Remote entry-level jobs Remote jobs with no experience required Remote junior jobs (1-3 years of experience) Digital nomad jobs Remote jobs with no degree required Freelance remote jobs Temporary remote jobs Remote jobs hiring now Stay at home mom jobs