Sr Project Manager, GRC (Governance Risk and Compliance)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr Project Manager, GRC (Governance Risk and Compliance) based in United States. This is a high-impact opportunity for an experienced project manager to lead security, compliance, and regulatory remediation initiatives across a growing organization. You will own complex projects from audit findings and control gaps through planning, execution, and final remediation. Working closely with Security, Legal, Compliance, Finance, Engineering, and other teams, you will translate regulatory requirements into practical, actionable work. You will also support recurring risk and compliance programs while maintaining clear visibility into treatment plans and deadlines. A key part of the role is creating executive-level reporting and dashboards that turn complex project and risk data into clear insights. The ideal candidate will bring strong project discipline, technical fluency, and the confidence to operate across both technical teams and executive stakeholders. Own end-to-end remediation projects related to SOC 2, ITGC, privacy, AI governance, security, and other regulatory requirements, translating findings and obligations into clear plans, milestones, owners, and deliverables. Manage 2–4 concurrent cross-functional projects, maintaining project plans, tracking risks, issues, dependencies, and deadlines while proactively escalating blockers. Translate security and compliance requirements into actionable technical work that engineering and security teams can execute, maintaining requirements traceability throughout delivery. Apply Agile, waterfall, or hybrid project management methodologies based on project scope, regulatory requirements, and deadlines. Support annual risk assessments and recurring compliance programs by coordinating schedules, stakeholder inputs, deliverables, and deadlines. Track risk treatment plans, ownership, and remediation status, identifying at-risk activities and maintaining accurate project and GRC/IRM data in platforms such as Jira or Optro. Coordinate with external auditors when needed to ensure remediation deliverables meet audit and compliance expectations. Serve as the central point of contact for project and remediation status across Security, Legal, Compliance, Finance, Engineering, and other stakeholders. Build leadership-facing dashboards and reporting that clearly communicate remediation progress, risk treatment status, milestones, and emerging issues. Deliver concise executive updates and risk escalations, facilitate project meetings and working sessions, and ensure decisions and action items are documented and followed through to completion. Improve GRC project management processes, templates, tooling, intake, prioritization, and resource planning to increase consistency and efficiency across the remediation portfolio. Requirements 6+ years of project management experience leading complex, cross-functional initiatives, with 2+ years of experience managing security, compliance, or regulatory remediation projects strongly preferred. Demonstrated ability to translate security and compliance requirements into technical work and manage requirements through delivery. Experience developing executive-level reports, dashboards, summaries, or other visibility tools for project, remediation, or risk management. Familiarity with SOC 2, ITGC, or comparable regulatory and compliance frameworks, including how audit findings and risk treatment plans translate into remediation initiatives. Working technical fluency across cloud infrastructure, APIs, software development lifecycles, and core cybersecurity concepts, with the ability to communicate credibly with engineers and security practitioners. Proven ability to manage multiple concurrent projects with competing priorities, deadlines, and stakeholder expectations. Strong command of Agile, waterfall, or hybrid project management methodo