Sr. Manager of Compliance and Risk Management

Calckey; Northern (KY); Hybrid; USD 170,000 - 190,000; Full time

Job summary

Parallels is seeking a Senior Manager of Compliance and Risk Management to mature the GRC program, with emphasis on third-party risk, customer RFPs, security questionnaires, and policy development. You will own the risk register, audit readiness, and drive enterprise-wide compliance initiatives, coordinating with Security, Legal, IT, and Engineering to maintain audit readiness year-round.

The role is fully remote in the United States, offering cross-functional collaboration and leadership of GRC

Qualifications

• 8+ years of experience in GRC, information security compliance, IT audit, or enterprise/vendor risk management.
• Experience leading audits against major frameworks (ISO 27001, NIST, SOC 2).
• Strong understanding of risk assessment methodologies and COBIT.
• Experience with risk registers and GRC tools.

Responsibilities

• Monitor organizational compliance with internal policies and external regulations; track control performance and prepare status reports.
• Lead third-party risk management, vendor security assessments, due diligence, and ongoing monitoring.
• Respond to customer RFPs and security/vendor questionnaires with timely, accurate responses.
• Maintain the Trust Center to provide compliance, security, and privacy information.
• Prepare audit-readiness materials and manage audits end-to-end (ISO 27001, SOC 2, etc.).

Skills

GRC

Audits

Risk management

Information security

Vendor risk

Policy development

Education

Bachelor's degree

Tools

GRC platforms

Ticketing systems

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Sr. Manager of Compliance and Risk Management

Regular Full-Time 550 Remote, US

5 days ago Requisition ID: 1076

Salary Range: $170,000.00 To $190,000.00 Annually

Senior Manager of Compliance and Risk Management

Parallels has an immediate vacancy for this role.

Push the boundaries of tech. In your sweatpants.

Parallels is seeking a Senior Manager of Compliance and Risk Management to support the ongoing maturity of our Governance, Risk, and Compliance program. This role is primarily focused on third-party risk management, responding to customer RFPs and security/vendor questionnaires, ensuring organization-wide compliance to common security, privacy, and AI frameworks, and leading, creating and managing the risk register, and policy development. In addition, this position will lead all infrastructure and product security or privacy incidents ensuring full compliance with required regulations.

This is a blended role: you’ll own audit readiness and control testing for our certifications while also driving enterprise and third-party risk management and compliance. You’ll work directly with external auditors and assessors, and partner closely with Security, Legal, IT, HR, and Engineering to keep the program audit-ready year-round.

The ideal candidate is experienced in third-party risk management, has worked on customer RFPs, security questionnaires, policy development, and is familiar with compliance frameworks such as SOC 2, ISO 27001, and DORA. Must be comfortable working cross-functionally with IT, Legal, and business stakeholders.

The top creative and technical minds could work anywhere.So why are so many of them choosing Parallels? Here are three reasons:

• This is the moment.It’s an exciting time at Parallels, with strong leadership, a refreshed brand, and a whole new approach to changing the way the world works. We’re at the forefront of a movement, and we want you to ride this wave with us.
• We want you to be you.Too often, companies tell you about their culture and then expect you to fit it. Our culture is built from the people who work here. We want you to feel safe to be who you are, take risks, and show us what you’ve got.
• It’s your world.We know you have a life. We want to be part of it, but not all of it. At Parallels, we’re serious about empowering people to work when, how, and where they want. Couch? Sweatpants? Cool with us. We believe that happy employees mean happy customers. That’s why we hire amazing people and get out of their way.

Sound good so far? Awesome. Let’s talk more about the Senior Manager of Compliance and Risk Management role and see if we’re destined to be together.

As a Senior Manager of Compliance and Risk Management, you will:

What YOU bring to the team:

• Monitor organizational compliance with internal policies and external regulations. Track control performance, identify gaps, and prepare regular compliance status reports for leadership.
• Monitor regulatory and framework changes (e.g., EU Data Act) and assess their impact on the compliance program.
• Respond to customer RFPs and security/vendor questionnaires, coordinating with subject matter experts to ensure accurate and timely responses. Maintain a library of standard responses and supporting evidence.
• Work directly with sales to attend customer calls for large enterprise customers.
• Maintain the organization’s Trust Center to enable customers and partners to quickly find compliance, security, and privacy information, with the goal of automating responses for repeat questions.
• Define and manage the third-party risk management program, including vendor security assessments, due diligence reviews, and ongoing monitoring of vendor risk. Track vendor remediation items and maintain vendor risk documentation.
• Ensure ongoing reviews for existing third parties, including changing usage related to AI and privacy where applicable.
• Maintain and update the organization’s risk register, ensuring all identified risks are documented, assessed, and monitored. Track risk treatment plans and follow up with risk owners on remediation status.
• Contribute to executive and board-level reporting on risk and compliance posture, including recurring management business reviews.
• Oversee the development, review, and implementation of GRC policies and procedures. Define processes and implement automation to ensure that policies stay current with regulatory changes and organizational needs.
• Lead employee awareness and training of policy requirements.
• Prepare and maintain audit-readiness materials, control narratives, policies, and standard operating procedures for both internal and external stakeholders.
• Lead and coordinate audits and assessments across the compliance portfolio (e.g., ISO 27001/42001, SOC 2, NIST, FedRAMP, GovRAMP, CMMC, PCI DSS), owning evidence collection, auditor interviews, and finding remediation end-to-end.
• Manage external audits end-to-end, including auditor and assessor relationships.
• Design, test, and monitor internal controls; identify gaps and drive remediation with control owners across the business.
• Lead all infrastructure and product security or privacy incidents, ensuring full compliance with required regulations and reporting obligations.
• Define and own the company-wide incident process, ensuring readiness and compliance with required regulatory frameworks.
• Implement systems to ensure efficient and compliance incident handling.
• Manage, hire and train GRC analysts, ensuring that they maintain the skills needed to manage the complexity of Parallels environment.

What YOU Bring to the Team:

• Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience)
• 8+ years of experience in GRC, information security compliance, IT audit, or enterprise/vendor risk management
• Hands-on experience leading or supporting audits against major frameworks (e.g., ISO 27001, NIST and SOC 2)
• Demonstrated experience managing external audits end-to-end, including auditor relationships and finding remediation
• Solid understanding of risk assessment methodologies and control frameworks (e.g., COBIT)
• Experience with risk register tools, GRC platforms and ticketing systems

US:

• Parallels features award-winning solutions that have helped millions of users for 40 years (can you believe it?!).
• We have millions of users and decades of innovation under our belts.
• We offer a fully remote workspace. There is no pressure to work in an office whatsoever.
• Hours are flexible, too! You’ve worked hard to build your life, and we don’t want you to give it up for work.
• Our team is growing fast, and there’s a ton of energy and a lot of really smart, motivated, fun people ready to welcome you in.

(FYI, we’re lucky to have a lot of interest and we so appreciate your application, though please note that we’ll only contact you if you’ve been selected for an interview.)

About Parallels

Parallels is a top VDI/EUC product helping businesses since 1999. Whether it’s desktop or cloud, on-prem or hybrid, Parallels has a solution to help your company optimize the speed and security of your work environment at an affordable price.

Our products enable millions of connected knowledge workers around the world to do great work faster. Our success is driven by an unwavering commitment to deliver a broad portfolio of innovative applications – including Parallels RAS, Parallels Desktop Enterprise, and Parallels DaaS, among others.

It is our policy and practice to offer equal employment opportunities to all qualified applicants and employees without regard to race, color, age, religion, national origin, sex, political affiliation, sexual orientation, marital status, disability, veteran status, genetics, or any other protected characteristic.

Parallels is committed to an inclusive, barrier-free recruitment and selection process and work environment. If you are contacted for a job opportunity, please advise us of any accommodation that are required. Appropriate accommodation will be provided upon request as required by Federal and Provincial regulations and Company Policy. Any information received relating to accommodation will be treated as confidential.

As part of our evaluation process, we utilize an AI tool to assess candidates.