Senior GRC Manager — Security & Compliance Lead

G2 Crowd, Inc.; Chicago (IL); On-site; USD 120,000 - 131,000; Full time

Benefits offered by this job

Flexible work

Parental leave

Unlimited PTO

Job summary

G2 is seeking a GRC Manager in Chicago to own the day-to-day security compliance and risk program within the Corporate team. You will manage customer security questionnaires, vendor risk reviews, policy governance, DSAR processing, and audit activities with executive visibility.

The ideal candidate will translate technical risk into business terms for customers and leadership, lead SOC 2 Type II and ISO 27001 efforts, and drive cross-functional collaboration across Legal, Security, IT, and Sales.

Qualifications

• 7–10 years of IT governance, risk, and compliance or information security experience.
• Deep knowledge of SOC 2 Type II, ISO 27001, NIST CSF and related SaaS security/privacy frameworks.
• Hands-on experience with modern GRC automation platforms (Vanta, Drata, OneTrust).
• Experience handling high-volume customer security questionnaires.
• Experience running third-party/vendor risk management.
• Experience managing DSAR workflows and privacy requests.
• Track record as primary contact for external auditors.
• Excellent written and verbal communication; executive-level reporting.
• Strong prioritization, program-management, and cross-functional influence.

Responsibilities

• Own and administer the security policy library and renewal cycle.
• Lead responses to customer/security questionnaires at scale.
• Manage the public Trust Center and be front-line for security matters.
• Oversee third-party/vendor risk management and remediation.
• Manage DSAR intake and regulatory timeliness.
• Support security addenda and contract redlines with Legal.
• Maintain enterprise risk registers with quarterly reassessment.
• Lead SOC 2 Type II and ISO 27001 audit cycles end-to-end.
• Manage GRC tooling, budget, and vendor ecosystem.
• Deliver executive dashboards on program health and risk posture.
• Advise on corrective actions following audit findings and incidents.
• Partner with Legal, Engineering, IT, and Sales to align goals.
• Identify process/automation improvements and build business case.

Skills

IT Governance

SOC 2 Type II

ISO 27001

NIST CSF

GRC Platforms

Security Questionnaires

Vendor Risk

DSAR

Audits

Communication

Program Management

Cross-Functional Influence

Tools

Vanta

Drata

OneTrust

Job description

G2 is seeking a GRC Manager in Chicago to own the day-to-day security compliance and risk program within the Corporate team. You will manage customer security questionnaires, vendor risk reviews, policy governance, DSAR processing, and audit activities with executive visibility.

The ideal candidate will translate technical risk into business terms for customers and leadership, lead SOC 2 Type II and ISO 27001 efforts, and drive cross-functional collaboration across Legal, Security, IT, and Sales.