careers
GRC and Compliance Manager
Turn requirements and risks into controls that work and can be proven.
A governance, risk and compliance manager maps the company's technology risks, aligns the program with frameworks and regulation, and makes sure controls have owners and evidence. The goal is real risk reduction that also satisfies auditors, translated into reports that leadership can use.
see this path on the journey mapA day in the job
- Maintain the risk register and drive treatment decisions with risk owners.
- Map controls to frameworks such as ISO 27001, NIST CSF and PCI DSS.
- Plan and run audits, with evidence collected continuously.
- Report risk and program metrics to executives in business terms.
Stage 1· Foundations
Learn risk management and the main frameworks.
Study here
Learn elsewhere
- The regulations that apply to your sector and countries
- Basic auditing concepts
Build this
Build a small risk register with ten risks, each with an owner, a rating and a treatment.
Stage 2· Practitioner
Make controls operate and produce evidence.
Study here
- Compliance in practice: controls, evidence and audits
- Security metrics and reporting to leadership
- Third-party and supply chain risk
Learn elsewhere
- A GRC platform or evidence tooling
- Interviewing control owners and testing controls
Build this
Map one control to three frameworks and define how its evidence is produced automatically.
Stage 3· Advanced
Connect compliance to engineering and to strategy.
Study here
Learn elsewhere
- Business case writing and budget cycles
- Internal audit and assurance practice
Build this
Write a one-page board summary of the risk posture with three decisions you need from leadership.
What to show
- A control mapping across frameworks, with owners and evidence sources.
- A sample quarterly risk report for executives, with trends and requested decisions.
Certifications (examples)
- CISA (ISACA)
- CRISC (ISACA)
- ISO 27001 Lead Implementer
Examples, not endorsements or requirements. Check the issuer for current details.