Remote GRC Manager, Tech Risk & Controls

Coinbase; Salem (OR); Hybrid; USD 194,000 - 228,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) plan

Job summary

Coinbase is seeking a Manager, GRC to join the Technology Risk & Controls team within Security. You will lead advisory coverage across critical technology domains, evaluate posture, and guide governance improvements with engineering and security leaders.

You will manage a team of analysts, drive risk-informed decisions, and ensure controls are scalable and effective while aligning with regulatory expectations.

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance.
• Hands-on experience delivering full-stack GRC services (risk management, control design, continuous monitoring, governance documentation).
• Able to lead and mentor analysts and deliverables.

Responsibilities

• Lead second line advisory coverage for key technology and security domains.
• Partner with engineering and technology teams to evaluate domain posture and identify controls or governance needs.
• Review and challenge design of risks and controls to ensure scalable and effective mitigations.
• Coordinate across risk, controls, policy, audit, and assurance teams to translate incidents into improvements.
• Intake, triage, and quantify inherent and residual risk with SMEs and risk owners.
• Enable leadership decision-making by communicating risk tradeoffs and connecting risks, controls, and incidents.
• Build, grow, and coach a team of analysts and foster agile performance.

Skills

Tech risk experience

IT controls

IT audit

Cybersecurity risk

Compliance

GRC leadership

AI governance

Job description

Coinbase is seeking a Manager, GRC to join the Technology Risk & Controls team within Security. You will lead advisory coverage across critical technology domains, evaluate posture, and guide governance improvements with engineering and security leaders.

You will manage a team of analysts, drive risk-informed decisions, and ensure controls are scalable and effective while aligning with regulatory expectations.