Tech Risk & GRC Leader — Remote

Coinbase; Nashville (TN); Hybrid; USD 194,000 - 228,000; Full time

Job summary

Coinbase is hiring a Manager, GRC to lead second line advisory coverage for critical technology and security domains. You will manage a team, partner with engineering, assess risk posture, and drive improvements across disaster recovery, SDLC, identity and access management, and supply chain.

You will guide risk-based decisions, validate mitigations, and ensure governance aligns with business and regulatory expectations. This role is remote-first with periodic in-person surges.

Qualifications

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance.
• Hands-on experience delivering full-stack GRC services (risk management, control design, continuous monitoring, governance documentation).
• Proven ability to mentor analysts and grow teams.
• Ability to translate complex risk and compliance concepts into clear requirements for technical and non-technical audiences.
• Experienced in influencing cross-functional stakeholders and navigating ambiguity.

Responsibilities

• Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business.
• Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed.
• Review and challenge the design of new and existing risks and their corresponding controls to ensure scalable, effective mitigations.
• Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations into actionable improvements.
• Intake, triage, and calculate inherent and residual risk with subject matter experts and risk owners, facilitating risk treatment decisions.
• Enable leadership decision-making by communicating risk tradeoffs and linking risks, controls, policies, incidents, and findings into clear narratives.
• Build, grow, and coach a team of technology and security analysts and senior analysts, fostering agility and performance feedback.

Job description

Coinbase is hiring a Manager, GRC to lead second line advisory coverage for critical technology and security domains. You will manage a team, partner with engineering, assess risk posture, and drive improvements across disaster recovery, SDLC, identity and access management, and supply chain.

You will guide risk-based decisions, validate mitigations, and ensure governance aligns with business and regulatory expectations. This role is remote-first with periodic in-person surges.