Ivalua
Sr Manager, InfoSec Governance Risk and Compliance (GRC)
New York City, New York, US +1 · Manager · Full-time · Posted Oct 6, 2025
- Location
- New York City, New York, US
Pittsburgh, Pennsylvania, United States - Experience
- At least 7+ years leading GRC programs and compliance certifications and audits; at least 3+ years as a direct leader managing a team.
- Education
- Bachelor’s degree in a related field preferred or equivalent experience with proven skills.
About the job
Leads Ivalua’s global Information Security GRC program, including compliance, audits, risk management, and team development.
What you'll do
- Lead and develop the global GRC team and program; manage compliance efforts and certification audits.
- Maintain security controls and policies, manage audit findings and customer compliance requests, and oversee third-party risk assessments.
- Advise stakeholders on security frameworks, negotiate security terms with Legal, and lead security awareness and training.
What they ask for
- At least 7+ years of experience leading GRC programs and managing compliance certifications and audits.
- At least 3+ years of experience as a direct leader managing a team.
- Strong knowledge of security frameworks including NIST SP 800-53, NIST 800-171, ITAR, PCI DSS, SOC2, and FedRAMP.
- Ability to manage and influence stakeholders across departments and time zones.
Nice to have
- Bachelor’s degree in a related field or equivalent experience with proven skills.
Pay
USD 112000–USD 208000 (base salary)
Tools
FedRAMP, IRAP, ISO 27001, HIPAA, SOC1/SOC2, PCI DSS, NIST SP 800-53 Rev 5, NIST 800-171
Model-written summary · the original posting is authoritative