GRC Program Lead – Security, Privacy & Compliance

Doppel; New York (NY); On-site; USD 170,000 - 190,000; Full time

Job summary

Doppel is seeking a Manager, Governance, Risk & Compliance to own and scale our GRC program end to end in the United States. You will lead a team of GRC analysts and set the strategy, roadmap, and operating model for certifications, risk management, and third-party risk across the company.

You will be the primary GRC voice to executives, auditors, and customers, owning SOC 2 Type II, ISO 27001, ISO 27701, and ISO 42001, and driving control assurance, privacy, and AI governance within a

Qualifications

• 8+ years in GRC, security audit, or risk management.
• At least 1 year managing people and owning a GRC program end to end.
• Executive ownership of SOC 2 Type II and ISO 27001 programs.
• Experience with ISMS/PIMS/AIMS and Trust Services Criteria.
• Cloud-first environments (AWS/Azure/GCP) experience.
• Experience designing enterprise risk management programs.
• Certifications such as CISA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or CIPP/CIPM are a plus.

Responsibilities

• Define and execute the multi-year GRC strategy and roadmap.
• Hire, manage, coach, and develop a team of GRC analysts.
• Direct audit scoping, readiness assessments, and remediation planning.
• Own the enterprise and security risk framework and risk appetite.
• Design the common control framework and continuous-monitoring approach.
• Own the access governance program and third-party risk management.
• Lead the customer trust function and executive security reviews.
• Advance governance & privacy policies and DPIAs.
• Deliver dashboards on risks, controls, and certification status.

Skills

GRC leadership

Auditing & risk management

People management

Executive communication

Tools

GRC tooling

Job description

Doppel is seeking a Manager, Governance, Risk & Compliance to own and scale our GRC program end to end in the United States. You will lead a team of GRC analysts and set the strategy, roadmap, and operating model for certifications, risk management, and third-party risk across the company.

You will be the primary GRC voice to executives, auditors, and customers, owning SOC 2 Type II, ISO 27001, ISO 27701, and ISO 42001, and driving control assurance, privacy, and AI governance within a