Remote GRC Manager: Tech Risk & Controls

Coinbase; Juneau (AK); On-site; USD 194,000 - 228,000; Full time

Job summary

Coinbase is recruiting a Manager, GRC to lead the Technology Risk & Controls team within Security. The role focuses on second-line advisory coverage across critical technology domains and collaboration with engineering, infrastructure, and security leaders to improve risk posture and drive risk-informed decisions.

You will manage and mentor analysts, translate risk concepts for technical and non-technical audiences, and ensure controls are scalable and aligned with regulatory expectations.

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance.
• Hands-on experience delivering full-stack GRC services (risk management, control design, continuous monitoring, governance documentation).
• Deep understanding of governance across infrastructure resiliency, SDLC, change management, or incident response.
• Proven track record mentoring analysts and delivering results on timelines.
• Ability to translate complex risk concepts into clear requirements for technical and non-technical audiences.

Responsibilities

• Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business.
• Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed.
• Review and challenge the design of new and existing risks and their corresponding controls to ensure mitigations are scalable, effective, and aligned to business, risk, and regulatory expectations.
• Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations into actionable improvements that strengthen the technology control environment.
• Intake, triage, and calculate inherent and residual risk with subject matter experts and risk owners, facilitating risk treatment decisions and validating execution of mitigation plans.
• Enable leadership decision-making by communicating quantitative and qualitative risk tradeoffs and connecting risks, controls, policies, incidents, and findings into clear narratives that support prioritization and reporting.
• Build, grow, and coach a team of technology and security analysts and senior analysts, fostering a culture of agility, innovation, and continuous performance feedback.

Skills

Technology risk

IT controls

IT audit

Cybersecurity risk

Compliance

People management

Stakeholder communication

AI risk governance

Job description

Coinbase is recruiting a Manager, GRC to lead the Technology Risk & Controls team within Security. The role focuses on second-line advisory coverage across critical technology domains and collaboration with engineering, infrastructure, and security leaders to improve risk posture and drive risk-informed decisions.

You will manage and mentor analysts, translate risk concepts for technical and non-technical audiences, and ensure controls are scalable and aligned with regulatory expectations.