Senior GRC Manager, Technology Risk & Controls (Remote)

Coinbase; Montpelier (VT); On-site; USD 194,000 - 228,000; Full time

Job summary

Coinbase is hiring a Manager, GRC to join our Technology Risk & Controls team within Security. You will lead second line advisory coverage across critical technology domains, helping engineering and infrastructure teams improve risk posture, control design, and governance.

You will mentor a team of analysts, translate complex risk concepts into clear requirements for technical and non-technical audiences, and ensure mitigations are scalable, cost-effective, and aligned with regulatory

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance.
• Hands-on experience delivering full-stack GRC services.
• Understanding of infrastructure resiliency, SDLC, change management, or incident response.
• Experience mentoring analysts and delivering on timelines.
• Ability to translate risk concepts into clear requirements for technical and non-technical audiences.
• Responsible use of generative AI with human oversight.

Responsibilities

• Lead second line advisory coverage for key technology and security domains.
• Partner with engineering and technology teams to evaluate posture and identify needed controls.
• Review and challenge design of risks and controls to ensure scalable, effective mitigations.
• Coordinate with risk, controls, policy, audit, and assurance teams to translate findings into improvements.
• Intake, triage, and calculate inherent and residual risk with SMEs and risk owners.
• Enable leadership decision-making by communicating risk tradeoffs and narratives.
• Build and coach a team of analysts, fostering agility and performance feedback.

Skills

Technology risk

IT controls

IT audit

Cybersecurity risk

Compliance

Full-stack GRC

Risk management

Control design

Governance documentation

Job description

Coinbase is hiring a Manager, GRC to join our Technology Risk & Controls team within Security. You will lead second line advisory coverage across critical technology domains, helping engineering and infrastructure teams improve risk posture, control design, and governance.

You will mentor a team of analysts, translate complex risk concepts into clear requirements for technical and non-technical audiences, and ensure mitigations are scalable, cost-effective, and aligned with regulatory