Remote GRC Manager - Tech Risk & Security Advisory

Coinbase; Cheyenne (WY); On-site; USD 194,000 - 228,000; Full time

Job summary

Coinbase is hiring a Manager, GRC to join our Technology Risk & Controls team within Security. You will lead second line advisory coverage across critical technology domains, partnering with engineering to strengthen risk management and control maturity.

You will mentor analysts, drive governance improvements, and translate complex risk concepts into actionable requirements for technical and non-technical audiences, all in a remote-first setting with periodic in-person surges.

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance; hands-on GRC services including risk management, control design, monitoring, governance docs.

Responsibilities

• Lead second line advisory coverage for key technology and security domains across risk posture, control design, policy alignment, and emerging issues.
• Partner with engineering and technology teams to evaluate domain posture and identify where controls, remediation, or governance improvements are needed.
• Review and challenge designs of risks and their controls to ensure scalable, effective mitigations.
• Coordinate with risk, controls, policy, audit, and assurance teams to translate incidents and regulatory expectations into improvements.
• Facilitate risk treatment decisions and validate execution of mitigation plans with SMEs and risk owners.
• Communicate risk tradeoffs and connect risks, controls, policies, incidents, and findings to support prioritization and reporting.
• Build and coach a team of analysts, fostering agility, innovation, and performance feedback.

Skills

Technology risk

IT controls

IT audit

Cybersecurity risk

Compliance

Team leadership

Cross-functional collaboration

AI risk management

Tools

Risk management tools

Governance frameworks

Job description

Coinbase is hiring a Manager, GRC to join our Technology Risk & Controls team within Security. You will lead second line advisory coverage across critical technology domains, partnering with engineering to strengthen risk management and control maturity.

You will mentor analysts, drive governance improvements, and translate complex risk concepts into actionable requirements for technical and non-technical audiences, all in a remote-first setting with periodic in-person surges.