Ivalua
Sr Manager, InfoSec Governance Risk and Compliance (GRC)
Pittsburgh, Pennsylvania, United States · Manager · Full-time · Posted Oct 8, 2025
- Experience
- At least 7+ years leading GRC programs and managing compliance certifications and audits; at least 3+ years as a direct leader managing a team.
- Education
- Bachelor’s degree in related field preferred or equivalent experience with proven skills.
About the job
Leads Ivalua’s global information security GRC program, team, compliance activities, audits, and risk management.
What you'll do
- Lead and develop the global GRC team and program; manage compliance certifications, audits, and continuous control monitoring.
- Oversee customer security requests, third-party risk, remediation, security policies, and awareness training.
- Advise on security frameworks and collaborate with business and legal teams on security communications and contractual terms.
What they ask for
- At least 7+ years of experience leading GRC programs and managing compliance certifications and audits.
- At least 3+ years of experience as a direct leader managing a team.
- Strong knowledge of security frameworks including NIST SP 800-53, NIST 800-171, ITAR, PCI DSS, SOC2, and FedRAMP.
- Demonstrated ability to influence stakeholders across departments and time zones.
Nice to have
- Bachelor’s degree in a related field preferred or equivalent experience with proven skills.
Pay
USD 112000 (base salary); USD 208000 (base salary)
Tools
NIST SP 800-53 Rev 5, NIST 800-171, ITAR, FedRAMP, IRAP, ISO 27001, HIPAA, PCI DSS
Model-written summary · the original posting is authoritative