Coinbase6 дней назад

Руководитель GRC

16 164–19 017 ₽в месяц · до вычета

РЫНОК

13 634 ₽медиана по профессии

Tech Lead / Team Lead · 356 вакансий с указанной зарплатой

5 092половина предложений: 9 708–18 1041,2 млн

В рынке · выше 67% предложений

Remote - USA

Обязанности

01Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business
02Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed
03Review and challenge the design of new and existing risks and their corresponding controls to ensure our mitigations are scalable, effective, and aligned to business, risk, and regulatory expectations
04Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations into actionable improvements that strengthen the technology control environment
05Intake, triage, and calculate inherent and residual risk with subject matter experts and risk owners, facilitating risk treatment decisions and validating execution of mitigation plans
06Enable leadership decision-making by communicating quantitative and qualitative risk tradeoffs and connecting risks, controls, policies, incidents, and findings into clear narratives that support prioritization and reporting
07Build, grow, and coach a team of technology and security analysts and senior analysts, fostering a culture of agility, innovation, and continuous performance feedback

018+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance, with hands-on experience delivering full-stack GRC services (risk management, control design, continuous monitoring, governance documentation) - not a controls-only or risk-only background
02Deep understanding of technical design and governance principles across one or more domains such as infrastructure resiliency, SDLC, change management, or incident response, with demonstrated ability to challenge status quo and drive improvement
03Hands-on experience evaluating risks and control design, identifying weaknesses, and partnering with stakeholders to improve risk outcomes and control maturity
04Proven track record managing and mentoring analysts, growing their capabilities and careers while holding teams accountable to deliverables and timelines
05Track record of influencing cross-functional stakeholders, navigating ambiguity, and translating complex risk and compliance concepts into clear functional requirements for both technical and non-technical audiences
06Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality

01Remote-first company with quarterly in-person working sessions called 'surges'
02Total compensation may include equity and bonus eligibility
03Benefits include medical, dental, vision, 401(k)
04Candidates may submit a maximum of 3 applications within a 6-month period