Senior Digital Compliance Manager (GRC)

Lead design and maturation of automated compliance capabilities across security and privacy domains, focusing on reducing manual efforts and scaling assurance across multiple frameworks.

Drive technical implementation and optimization of GRC platforms, including workflows, integrations, and data models to support measurable compliance outcomes.

Partner with engineering, architecture, product, legal, and audit teams to embed compliance-by-design and continuous control monitoring with automation and AI enablement.

Bachelor’s degree in law, information security, computer science, information systems, or related discipline, or equivalent experience.

8+ years of experience in security, privacy, risk, compliance, governance engineering, or related technical program role with experience in scalable compliance/control processes.

Proven senior individual contributor experience in technical GRC, security engineering, compliance engineering, or control automation.

Strong knowledge of security/compliance frameworks (NIST, ISO 27000 series, PCI DSS, SOC 2), GRC platforms, cloud, application security, IAM, and automation scripting (e.g. SQL, Python, PowerShell).

Experienced technical practitioner with deep GRC engineering skills capable of influencing cross-functional teams without direct managerial authority.

Background in designing and operating automated continuous controls monitoring and evidence collection in cloud-native and complex technical environments.

Demonstrated ability to integrate AI/ML technologies responsibly to improve compliance workflows, risk detection, and operational efficiency.