Remote GRC Manager, Tech Risk & Controls

Coinbase, Inc.; Concord (NH); Remote; USD 194,000 - 228,000; Full time

Job summary

Coinbase, Inc. is hiring a Manager, GRC to join the Technology Risk & Controls team within Security.

You will lead second line advisory coverage across critical technology and security domains, guiding risk-informed decisions and partnering with engineering leaders to strengthen controls and governance. You will manage a team of analysts and drive improvements across disaster recovery, SDLC, IAM, and supply chain.

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance with hands-on experience delivering full-stack GRC services.
• Deep understanding of technical design and governance across infrastructure resiliency, SDLC, change management, or incident response.
• Hands-on experience evaluating risks and control design, identifying weaknesses, and improving risk outcomes.
• Proven track record mentoring analysts and delivering on timelines.
• Ability to translate complex risk concepts into clear requirements for technical and non-technical audiences.
• Generative AI must be used responsibly with human oversight.

Responsibilities

• Lead second line advisory coverage for key technology and security domains and assess risk exposure, control effectiveness, policy alignment, and issues.
• Partner with engineering to evaluate domain posture and identify needed controls or governance improvements.
• Review and challenge risk designs to ensure scalable and compliant mitigations.
• Coordinate across risk, controls, policy, audit, and assurance to translate findings into improvements.
• Intake, triage, and calculate inherent and residual risk with SMEs to guide mitigations.
• Communicate risk tradeoffs to enable leadership decisions and reporting.
• Coach a team of analysts and foster agility and performance.

Skills

GRC leadership

Risk assessment

Controls design

Stakeholder engagement

AI governance

Job description

Coinbase, Inc. is hiring a Manager, GRC to join the Technology Risk & Controls team within Security.

You will lead second line advisory coverage across critical technology and security domains, guiding risk-informed decisions and partnering with engineering leaders to strengthen controls and governance. You will manage a team of analysts and drive improvements across disaster recovery, SDLC, IAM, and supply chain.