GRC Program Manager, Assurance Engineering & Control Systems

Overview

Technical GRC Program Manager who builds and improves assurance and control evidence systems to support consequential audits and compliance outcomes.

What you'll do

• Lead external, internal, customer, and certification audit work from scoping through evidence review, fieldwork, remediation, and closeout.
• Build a common control framework that links risk, control intent, implementation, owners, systems, evidence, and applicable frameworks.
• Validate actual scope and ownership rather than assuming last year’s controls, product boundaries, or evidence remain accurate.
• Use Codex to build and test evidence checks, control mappings, request triage, owner workflows, monitoring, and remediation reporting.
• Partner with engineers on cloud architecture, identity, logging, data flows, software changes, vulnerabilities, and control effectiveness.
• Design maintainable, permission-aware tools that preserve source provenance, human review, and evidence integrity.
• Define roadmaps, decision rights, milestones, success metrics, and cross-functional escalations.

What you'll need

• Direct ownership of meaningful audit, security, customer-assurance, or regulatory outcomes.
• Practical knowledge of control design, evidence, testing, operating effectiveness, and remediation.
• Technical fluency across cloud systems, identity, logging, APIs, data flows, and system boundaries.
• Ability to use Codex or comparable AI-assisted development tools to build, run, inspect, and test solutions.
• Experience using code, SQL, APIs, structured data, automation, or data workflows to solve operational problems.
• Ability to design reusable cross-framework controls while preserving framework-specific test and evidence requirements.