Senior GRC Manager: Risk, Compliance & Audit Lead

G2; Chicago (IL); On-site; USD 120,000 - 190,000; Full time

Job summary

G2 is seeking a Governance, Risk, and Compliance (GRC) Manager to own day-to-day security compliance and risk programs. You will coordinate with Legal, Security Engineering, IT, Sales, and executives to protect customer trust and ensure audit readiness.

The role is a senior individual contributor with experience in SOC 2 Type II, ISO 27001, and vendor risk. You will manage policy governance, DSAR processing, and respond to enterprise security questionnaires at scale.

Qualifications

• Experience leading IT governance, risk, and compliance programs.
• Proven ability to manage high-volume customer security questionnaires and vendor risk reviews.
• Strong communication skills with executives and cross-functional partners.
• Experience coordinating SOC 2 Type II and ISO 27001 audits.

Responsibilities

• Own and administer the security policy library and annual review cycle.
• Lead responses to customer security questionnaires and maintain a knowledge library.
• Oversee Trust Center and represent the company on security matters.
• Run third-party/vendor risk management program and remediation.
• Manage DSAR intake and fulfillment within regulatory timelines.
• Support security addenda and contract negotiations with Legal partners.
• Maintain enterprise risk registers and governance across functions.
• Lead SOC 2 Type II and ISO 27001 audit cycles end-to-end.
• Build executive dashboards on program health and risk posture.
• Influence cross-functional partners to close control gaps.

Skills

SOC 2 Type II

ISO 27001

NIST CSF

GRC automation tools

Vendor risk management

DSAR handling

Executive stakeholder communication

Education

Bachelor's degree in IT/IS

Tools

Vanta

Drata

OneTrust

Job description

G2 is seeking a Governance, Risk, and Compliance (GRC) Manager to own day-to-day security compliance and risk programs. You will coordinate with Legal, Security Engineering, IT, Sales, and executives to protect customer trust and ensure audit readiness.

The role is a senior individual contributor with experience in SOC 2 Type II, ISO 27001, and vendor risk. You will manage policy governance, DSAR processing, and respond to enterprise security questionnaires at scale.