Manager, GRC

Coinbase, Inc.; Washington (District of Columbia); Hybrid; USD 194,000 - 228,000; Full time

Job summary

Coinbase, Inc. is seeking an experienced technology risk leader to drive second-line advisory coverage across critical technology and security domains. You will assess risk exposure, review controls, and ensure governance alignment across the business.

You will partner with engineering to improve posture, challenge design of mitigations, and coordinate across risk, policy, and audit teams. Mentoring analysts and communicating risk tradeoffs to leadership are key parts of the role.

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance delivering full-stack GRC services.
• Deep understanding of technical design and governance across infrastructure resiliency, SDLC, change management, or incident response.
• Hands-on experience evaluating risks and control design and driving improvements.
• Proven track record mentoring analysts and managing teams to meet deliverables.

Responsibilities

• Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues.
• Partner with engineering and technology teams to evaluate domain posture and identify where controls or governance improvements are needed.
• Review and challenge design of risks and controls to ensure scalable, effective mitigations.
• Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents and regulatory expectations into improvements.
• Intake, triage, and calculate inherent and residual risk with SMEs and risk owners, facilitating risk treatment decisions.
• Enable leadership decision-making by communicating risk tradeoffs and connecting risks, controls, and findings into clear narratives.
• Build, grow, and coach a team of technology and security analysts.

Skills

Technology risk leadership

IT controls

Cybersecurity risk

Compliance programs

GRC services

Mentoring analysts

Job description

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.

What you'll do:

• Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business.

• Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed.

• Review and challenge the design of new and existing risks and their corresponding controls to ensure our mitigations are scalable, effective, and aligned to business, risk, and regulatory expectations.

• Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations into actionable improvements that strengthen the technology control environment.

• Intake, triage, and calculate inherent and residual risk with subject matter experts and risk owners, facilitating risk treatment decisions and validating execution of mitigation plans.

• Enable leadership decision-making by communicating quantitative and qualitative risk tradeoffs and connecting risks, controls, policies, incidents, and findings into clear narratives that support prioritization and reporting.

• Build, grow, and coach a team of technology and security analysts and senior analysts, fostering a culture of agility, innovation, and continuous performance feedback.

Required Skills and Experience:

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance, with hands-on experience delivering full-stack GRC services (risk management, control design, continuous monitoring, governance documentation) - not a controls-only or risk-only background.

• Deep understanding of technical design and governance principles across one or more domains such as infrastructure resiliency, SDLC, change management, or incident response, with demonstrated ability to challenge status quo and drive improvement.

• Hands-on experience evaluating risks and control design, identifying weaknesses, and partnering with stakeholders to improve risk outcomes and control maturity.

• Proven track record managing and mentoring analysts, growing their capabilities and careers while holding teams accountable to deliverables and timelines.

• Track record of influencing cross-functional stakeholders, navigating ambiguity, and translating complex risk and compliance concepts into clear functional requirements for both technical and non-technical audiences.

• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Position ID: P78170

#LI-Remote

*Pay Transparency Notice:** *Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).

Annual base salary range (excluding equity and bonus):

$193,970—$228,200 USD

• *Application Limit: *Candidates may submit a maximum of 3 applications within a 6-month period.

• *Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.

• *US Applicants: *View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.

• *Accommodations: *If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.

• *Data Privacy & Arbitration: *By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.