Remote GRC Advisory Manager, Tech & Security

Coinbase, Inc.; Charlotte (NC); Ibrido; USD 194.000 - 228.000; Tempo pieno

Descrizione del lavoro

Coinbase, Inc. is seeking a Manager, GRC to lead the Technology Risk & Controls team in Security. This role will own advisory coverage across critical technology domains, shaping risk posture, control design, and governance for the business.

You will manage a team of analysts, partner with engineering and infrastructure, and translate risk findings into actionable improvements that strengthen the technology control environment. Remote-first with quarterly in-person surges.

Competenze

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance with hands-on full-stack GRC delivery.
• Experience evaluating risk posture, control design, and governance documentation.
• Ability to mentor analysts and lead cross-functional partnerships.
• Ability to translate risk concepts into clear requirements for technical and non-technical audiences.
• Experience with AI governance and responsible use of generative AI is a plus.

Mansioni

• Lead second line advisory coverage for technology and security domains and assess risk exposure and control effectiveness.
• Partner with engineering to evaluate domain posture and drive governance improvements.
• Review and challenge risk design to ensure scalable, effective mitigations.
• Coordinate across risk, policy, audit, and assurance to translate findings into improvements.
• Mentor analysts and grow the team while maintaining accountability and timelines.
• Communicate risk tradeoffs to enable leadership decisions.

Conoscenze

GRC leadership

risk advisory

team coaching

risk & controls

AI governance

Descrizione del lavoro

Coinbase, Inc. is seeking a Manager, GRC to lead the Technology Risk & Controls team in Security. This role will own advisory coverage across critical technology domains, shaping risk posture, control design, and governance for the business.

You will manage a team of analysts, partner with engineering and infrastructure, and translate risk findings into actionable improvements that strengthen the technology control environment. Remote-first with quarterly in-person surges.