Ivalua
Sr Manager, InfoSec Governance Risk and Compliance (GRC)
San Francisco Bay Area, California, United States +1 · Manager · Full-time · Posted Oct 6, 2025
- Location
- San Francisco Bay Area, California, United States
Pittsburgh, Pennsylvania, United States - Experience
- At least 7+ years leading GRC programs and managing certifications and audits; at least 3+ years as a direct team leader.
- Education
- Bachelor’s degree in related field preferred or equivalent experience with proven skills.
About the job
Leads Ivalua’s global information security Governance, Risk, and Compliance program, including compliance, audits, risk management, and team development.
What you'll do
- Lead and develop the global GRC team and program; manage certifications, audits, and continuous control monitoring.
- Respond to customer security requests, advise on frameworks, and communicate the company’s security posture to customers and internal stakeholders.
- Oversee security policies, awareness training, third-party risk, contractual security reviews, and remediation of audit findings.
What they ask for
- At least 7+ years of experience leading GRC programs and managing compliance certifications and audits.
- At least 3+ years of experience as a direct leader managing a team.
- Strong knowledge of security frameworks including NIST SP 800-53, NIST 800-171, ITAR, PCI DSS, SOC2, and FedRAMP.
- Demonstrated ability to manage and influence stakeholders across departments and time zones.
Pay
USD 112000 (base salary); USD 208000 (base salary)
Tools
FedRAMP, IRAP, ISO 27001, HIPAA, SOC1/SOC2, PCI DSS, NIST SP 800-53 Rev 5, NIST 800-171
Model-written summary · the original posting is authoritative