Senior GRC & Third-Party Risk Manager - Remote

ADP, Inc.; United States; Remote; USD 170,000 - 190,000; Full time

Job summary

Parallels is seeking a Senior Manager of Compliance and Risk Management to advance governance, risk, and compliance program. This role focuses on third-party risk management, responding to customer RFPs and security/vendor questionnaires, ensuring organization-wide compliance to security, privacy, and AI frameworks, and leading the risk register and policy development.

The role requests experience with SOC 2, ISO 27001, DORA, and cross-functional collaboration with IT, Legal, HR, and Engineering

Qualifications

• 8+ years of experience in GRC, information security compliance, IT audit, or enterprise/vendor risk management.
• Hands-on audits experience against ISO 27001, NIST and SOC 2 frameworks.
• Experience managing external audits end-to-end including auditor relationships.
• Strong understanding of risk assessment methodologies and COBIT framework.
• Experience with risk register tools, GRC platforms and ticketing systems.

Responsibilities

• Monitor compliance with internal policies and external regulations; track control performance and gaps.
• Respond to customer RFPs and security/vendor questionnaires with timely, accurate responses.
• Lead third-party risk program: vendor assessments, due diligence, ongoing monitoring.
• Maintain and update the risk register; track remediation status and risk ownership.
• Oversee audits and assessments across the portfolio (ISO 27001, SOC 2, NIST, FedRAMP, etc).
• Manage external audits end-to-end and auditor relationships.
• Design, implement and update GRC policies; drive automation and policy governance.
• Lead security/privacy incidents and ensure regulatory compliance and reporting.

Skills

GRC experience

Information security

IT audits

Vendor risk management

Education

Bachelor's degree in Information Security, CS, or related

Tools

GRC platforms

Ticketing systems

Job description

Parallels is seeking a Senior Manager of Compliance and Risk Management to advance governance, risk, and compliance program. This role focuses on third-party risk management, responding to customer RFPs and security/vendor questionnaires, ensuring organization-wide compliance to security, privacy, and AI frameworks, and leading the risk register and policy development.

The role requests experience with SOC 2, ISO 27001, DORA, and cross-functional collaboration with IT, Legal, HR, and Engineering