Remote GRC Manager, Tech Risk & Controls

Coinbase; Northern (KY); Hybrid; USD 194,000 - 228,000; Full time

Job summary

Coinbase is recruiting a Manager, GRC to join our Technology Risk & Controls team within Security and lead second line of defense advisory across critical technology domains. You will manage a team and own advisory coverage for domains such as disaster recovery, SDLC, AI, identity and access management, and supply chain.

You will partner with engineering leaders to improve control design and governance, translate risk findings into actionable improvements, and help leadership make

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance.
• Hands-on experience delivering full-stack GRC services (risk management, control design, continuous monitoring, governance documentation).
• Proven track record mentoring analysts and influencing cross-functional stakeholders.

Responsibilities

• Lead second line advisory coverage across technology and security domains, assessing risk exposure and control effectiveness.
• Partner with engineering and technology teams to evaluate domain posture and identify where controls or governance improvements are needed.
• Review and challenge risk and control designs to ensure scalable, effective mitigations.
• Drive coordination among risk, controls, policy, audit, and assurance teams for improvements.
• Triage and calculate inherent and residual risk with SMEs and risk owners.
• Communicate risk tradeoffs to enable leadership decisions and reporting.
• Build, grow, and coach a team of analysts.

Skills

GRC

Risk management

Control design

Governance

Incident response

Mentoring analysts

Stakeholder influence

Generative AI usage

Job description

Coinbase is recruiting a Manager, GRC to join our Technology Risk & Controls team within Security and lead second line of defense advisory across critical technology domains. You will manage a team and own advisory coverage for domains such as disaster recovery, SDLC, AI, identity and access management, and supply chain.

You will partner with engineering leaders to improve control design and governance, translate risk findings into actionable improvements, and help leadership make