Senior Manager, Security Assurance & GRC (Remote)

Thrivent Financial; Minneapolis (MN); On-site; USD 146,000 - 198,000; Full time

Benefits offered by this job

Bonuses

Medical insurance

Dental insurance

Vision insurance

401k

Pension

Life insurance

Disability insurance

Paid time off

Holidays

Volunteer time off

Parental leave

Well-being benefits

Job summary

Thrivent Financial seeks a seasoned Manager of Information Security Assurance Services to lead governance, controls, and audit readiness across a growing GRC program. You will mature PCI DSS, NYDFS, and other frameworks while driving automation, standardization, and data-driven insights to strengthen security posture.

You will manage a multi-disciplinary team, partner with regulators and business units, and translate strategic priorities into actionable roadmaps and outcomes.

Qualifications

• Minimum 10 years of progressive experience across GRC and information security.
• Minimum 5 years of direct people leadership experience.
• Demonstrated PCI DSS experience including QSA/ISA interaction.
• Strong knowledge of NYDFS Part 500, NIST CSF, CIS Controls, and PCI DSS.
• Bachelor's degree in IT, security, or related field or equivalent experience.

Responsibilities

• Lead and mature governance, controls design, testing, and regulatory response.
• Own control framework and alignment with standards; maintain evidence model.
• Direct end-to-end PCI DSS and external audits; review high-risk responses.

Skills

Strategic ownership

Executive presence

Decision ownership

Talent development

Outcome focus

Hands-on leadership

Education

Bachelor's degree in IT/Security

Tools

ServiceNow IRM

Archer

AuditBoard

OneTrust

MetricStream

Job description

Thrivent Financial seeks a seasoned Manager of Information Security Assurance Services to lead governance, controls, and audit readiness across a growing GRC program. You will mature PCI DSS, NYDFS, and other frameworks while driving automation, standardization, and data-driven insights to strengthen security posture.

You will manage a multi-disciplinary team, partner with regulators and business units, and translate strategic priorities into actionable roadmaps and outcomes.