Senior GRC Manager — Security & Compliance Lead

Socket.dev; Chicago (IL); On-site; USD 110,000 - 140,000; Full time

Job summary

G2 is seeking a Governance, Risk, and Compliance Manager to own the day-to-day security compliance and risk program. This senior IC will lead customer security questionnaires, vendor risk reviews, policy governance, DSAR processing, and audit management, partnering with Legal and executive teams to advance risk posture.

The ideal candidate brings experience running a GRC program at scale, fluency in SOC 2 Type II and ISO 27001, and ability to translate risk into business language for customers

Qualifications

• 7–10 years of progressive experience in IT Governance, Risk, and Compliance or information security, including direct ownership of a compliance program.

Responsibilities

• Own and administer G2's security policy library and annual renewal cycle.

Skills

Program management

Security governance

SOC 2 Type II

ISO 27001

NIST CSF

GRC automation tools

Vendor risk management

Security questionnaires

Cross-functional collaboration

Executive stakeholder communication

Tools

Vanta

Drata

OneTrust

Job description

G2 is seeking a Governance, Risk, and Compliance Manager to own the day-to-day security compliance and risk program. This senior IC will lead customer security questionnaires, vendor risk reviews, policy governance, DSAR processing, and audit management, partnering with Legal and executive teams to advance risk posture.

The ideal candidate brings experience running a GRC program at scale, fluency in SOC 2 Type II and ISO 27001, and ability to translate risk into business language for customers