Remote GRC Manager — Tech Risk & Controls

Coinbase; Lincoln (NE); On-site; USD 194,000 - 228,000; Full time

Job summary

Coinbase is hiring a Manager, GRC to lead the Technology Risk & Controls team and oversee second line advisory coverage across critical tech and security domains. You’ll manage a team and partner with engineers to strengthen risk posture and governance.

The role emphasizes risk-informed decisions, cross-functional collaboration, and responsible use of generative AI to improve workflows and outcomes, with a remote-first, in-person surge cadence.

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance.
• Hands-on experience delivering full-stack GRC services.
• Experience across infrastructure resiliency, SDLC, change management, or incident response.
• Experience evaluating risks and improving control maturity.
• Proven track record mentoring analysts.
• Influencing cross-functional stakeholders and communicating risk concepts.
• Uses generative AI responsibly with human oversight.

Responsibilities

• Lead second line advisory coverage for key technology and security domains.
• Partner with engineering and technology teams to evaluate domain posture and identify needed controls or governance improvements.
• Review and challenge the design of new and existing risks and controls for scalable mitigations.
• Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents and findings into improvements.
• Intake, triage, and calculate inherent and residual risk with SMEs and risk owners for mitigation decisions.
• Enable leadership decision-making by communicating risk tradeoffs and narratives.
• Build and coach a team of analysts fostering agility and performance.

Skills

Technology risk

Risk management

Team leadership

Stakeholder comms

AI governance

Job description

Coinbase is hiring a Manager, GRC to lead the Technology Risk & Controls team and oversee second line advisory coverage across critical tech and security domains. You’ll manage a team and partner with engineers to strengthen risk posture and governance.

The role emphasizes risk-informed decisions, cross-functional collaboration, and responsible use of generative AI to improve workflows and outcomes, with a remote-first, in-person surge cadence.