Manager, Governance, Risk & Compliance (GRC)

📋 Description

• Report to the VP of Information Security.
• Own the day-to-day operation and improvement of Aya’s enterprise GRC program.
• Lead ServiceNow GRC / IRM configuration, optimization, and adoption.
• Design scalable automated controls and workflows translating requirements.
• Lead SOC 2 and ISO/IEC 27001:2022 readiness, audits, and remediation.
• Build dashboards and metrics to communicate posture to leadership.

🎯 Requirements

• 5+ years in Governance, Risk, and Compliance (GRC) or InfoSec.
• 2+ years hands-on ServiceNow GRC/IRM configuration and workflow design.
• Experience running or contributing to a modernized GRC program.
• Strong knowledge of SOC 2 and ISO/IEC 27001:2022.
• Leading/mentoring analysts; strong communication across teams.
• Cross-functional influence and strategic orientation.

🎁 Benefits

• Free premium medical, dental, life and vision insurance.
• Generous 401(k) match.
• Company-sponsored virtual events and team-building.
• Unlimited PTO (DTO).
• Virtual wellness (yoga/meditation/boot camp) classes.
• Discretionary bonuses where permitted by policy.