Senior GRC Manager, Tech Risk & Controls

Coinbase, Inc.; Sacramento (CA); Remote; USD 194,000 - 228,000; Full time

Job summary

Coinbase is hiring a Manager, GRC to join Technology Risk & Controls and lead the second line of defense across critical technology and security domains. You will own advisory coverage, co-develop risk-based controls, and partner with engineering, infrastructure, and security leaders to strengthen risk posture.

We seek a leader with 8+ years in technology risk or related fields, capable of mentoring teams and delivering end-to-end GRC services with a strong understanding of control design

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance with hands-on GRC delivery.
• Hands-on experience evaluating risks and designing controls across domains such as infrastructure, SDLC, incident response.
• Proven track record mentoring analysts and leading teams to meet deliverables and timelines.

Responsibilities

• Lead second line advisory coverage for key technology and security domains, assessing risk exposure and control effectiveness.
• Partner with engineering to evaluate domain posture and identify where controls or governance need improvements.
• Review and challenge the design of risks and controls to ensure scalable, effective mitigations.
• Coordinate across risk, controls, policy, audit, and assurance to translate findings into improvements.
• Intake, triage, and quantify inherent and residual risk with SMEs and risk owners for remediation decisions.
• Enable leadership decision-making by communicating risk tradeoffs and linking incidents to controls and policies.
• Build, grow, and coach a team of analysts, fostering agility and performance feedback.

Skills

Technology risk

IT controls

IT audit

Cybersecurity risk

Compliance

Risk management

Control design

Governance

Data privacy

AI governance

Job description

Coinbase is hiring a Manager, GRC to join Technology Risk & Controls and lead the second line of defense across critical technology and security domains. You will own advisory coverage, co-develop risk-based controls, and partner with engineering, infrastructure, and security leaders to strengthen risk posture.

We seek a leader with 8+ years in technology risk or related fields, capable of mentoring teams and delivering end-to-end GRC services with a strong understanding of control design