GRC Manager, Tech Risk & Controls

Coinbase; United States; Hybrid; USD 194,000 - 228,000; Full time

Job summary

Coinbase is seeking a Manager, GRC to join the Technology Risk & Controls team within Security and lead second line advisory coverage across critical technology and security domains. You will manage a team and own advisory coverage for domains including disaster recovery, SDLC, identity & access management, and supply chain.

The role focuses on evaluating risk posture, improving control design, and guiding engineering and security leaders toward risk-informed decisions in a remote-first

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance with hands-on experience delivering full-stack GRC services.
• Deep understanding of technical design and governance principles across infrastructure resiliency, SDLC, change management, or incident response.
• Hands-on experience evaluating risks and control design, identifying weaknesses, and partnering with stakeholders to improve outcomes.
• Proven track record mentoring analysts and delivering on timelines in a cross-functional setting.
• Track record of influencing stakeholders and translating risk concepts into clear requirements.
• Uses generative AI responsibly with human oversight to improve workflow efficiency, cost, and quality.

Responsibilities

• Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business.
• Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed.
• Review and challenge the design of new and existing risks and their corresponding controls to ensure mitigations are scalable, effective, and aligned to business, risk, and regulatory expectations.
• Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations into actionable improvements that strengthen the technology control environment.
• Intake, triage, and calculate inherent and residual risk with subject matter experts and risk owners, facilitating risk treatment decisions and validating execution of mitigation plans.
• Enable leadership decision-making by communicating quantitative and qualitative risk tradeoffs and connecting risks, controls, policies, incidents, and findings into clear narratives that support prioritization and reporting.
• Build, grow, and coach a team of technology and security analysts and senior analysts, fostering a culture of agility, innovation, and continuous performance feedback.

Job description

Coinbase is seeking a Manager, GRC to join the Technology Risk & Controls team within Security and lead second line advisory coverage across critical technology and security domains. You will manage a team and own advisory coverage for domains including disaster recovery, SDLC, identity & access management, and supply chain.

The role focuses on evaluating risk posture, improving control design, and guiding engineering and security leaders toward risk-informed decisions in a remote-first