Remote: Senior Manager, Information Security Assurance & GRC

Socket.dev

Minneapolis (MN)

On-site

USD 146,000 - 198,000

Full time

4 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

Bonuses

Medical insurance

Paid Time Off

Job summary

Thrivent is seeking a Manager, Information Security Assurance Services to lead the design, build, and maturation of the GRC program. You will oversee PCI DSS, risk management, and policy governance while driving automation and standardization across assurance products.

The role requires 10+ years in GRC and 5+ years of people leadership, with strong execution of regulatory engagements and executive communication.

Qualifications

Minimum 10 years in GRC, information security, technology risk, audits or related disciplines.
Minimum 5 years people leadership experience.
Experience with PCI DSS environments and regulator interaction.
Knowledge of NYDFS Part 500, NIST CSF, CIS Controls, PCI DSS.
Experience designing ITGCs and application controls.
Ability to communicate complex risk to executives and regulators.
Bachelor's degree or equivalent professional experience.

Responsibilities

Lead governance, controls design/testing, audit response, policy governance, and third-party risk management.
Own and mature the control framework and evidence model.
Direct end-to-end audit/regulatory responses and PCI DSS program oversight.
Scale the program using automation and GRC platforms.
Define KPIs/KRIs and deliver board-ready dashboards.