38 grc manager jobs at 25 companies in Winnetka, CA
3mo
Save
Mark Applied
Hide
3mo
GRC & Incident Manager
Los Angeles, California, United States
$145k-$163k/yrOnsiteFull Time
Lendistry: Technology-enabled lender providing capital to small businesses.
3+ YOE3-5 years in GRC, data privacy, risk management; SOC 2 and GLBA; cloud experience (AWS/Azure); privacy engineering; CIPT/CDPSE required; CIPM/CISSP preferred; B.S. in CS/Info Security or equivalent.
SHEIN: Global online retailer selling affordable fashion and lifestyle products.
7+ YOE7+ years in information security risk management; bachelor’s degree; CISSP/CISM/CISA or ISO 27001 Lead Auditor desirable; strong standards knowledge; team leadership experience.
Los Angeles or Chicago or Nashville or New York or Seattle
$100k-$135k/yrHybridFull Time
Metropolis: Computer vision technology for checkout-free parking and retail payments.
3+ YOE3+ years in information security GRC or technology compliance; experience managing security awareness programs; knowledge of SOC 2 and PCI-DSS; familiarity with AI/data security and training platforms; bachelor\u0002s degree required.
Delan Associates: Provides engineering and professional services to government agencies.
15+ YOERequires 15+ years of experience with SAP GRC 12.0 AC/PC, implementation and upgrades, access controls, risk management, cloud integration, testing, deployment, and production support.
SAP GRC 12.0 Access Control (AC), SAP GRC 12.0 Process Control (PC), Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), Business Role Management (BRM), Segregation of Duties (SoD), MSMP, SAP GRC Cloud, SAP GRC SuccessFactors (SF)
Panda Restaurant Group: Operator of American Chinese fast-casual restaurant chains.
7+ YOEBachelor's degree, 7+ years GRC/privacy/security/technology risk experience, knowledge of AI governance and cybersecurity frameworks, policy and program design, and strong advisory skills.
NIST AI RMF, EU AI Act, ISO 42001, NIST CSF, NIST 800-53, ISO 27001, ISO 27002, CIS
Austin or Tampa or Chicago or Cleveland or Miami or Los Angeles or Boston or New York or Florham Park or San Diego or San Francisco or Philadelphia or Houston
$77k-$202k/yrOnsiteFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
3+ YOEBachelor's degree, minimum 3 years' experience, knowledge of GRC technologies and risk management, strong analytical and communication skills, client-facing experience, ability to travel up to 60%.
Risk Consulting - Risk Technology - Oracle GRC - Manager (New York, NY, US, 10001-8604)
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or North Carolina or Philadelphia or Portland or San Francisco or Seattle or Tampa
$150k-$260k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
5+ YOEBachelor's or master's degree with ~5 years related experience; Oracle security/controls and controls testing experience; strong project management, client service, leadership, communication, analytical skills; valid US driver’s license and passport; willing to travel.
Northwood Space: Manufacturing ground stations and providing satellite communication infrastructure.
5+ YOE5+ years in GRC with ownership of enterprise compliance programs; deep knowledge of CMMC, NIST SP 800-171/800-53, FedRAMP, SOC 2, ITAR; ability to obtain TS/SCI; U.S. citizen or lawful permanent resident required.
Sony Pictures EntertainmentNYSE: SONY: Develops, produces, and distributes films and television programming worldwide.
8+ YOERequires 8+ years in IT compliance, audit, or risk management; expertise in SOX, COSO, ITGCs, and technology governance; a bachelor's degree; and CISA. SAP S4HANA and GRC preferred.
Latham & Watkins: Global law firm providing legal counsel to businesses.
10+ YOE2+ Mgmt10+ years in GRC/technology risk/compliance/audit/cybersecurity with 2+ years leadership, experience with client security questionnaires, ISO 27001 certification experience, strong communication and project management skills.
Albany or Arlington or Atlanta or Austin or Beaverton or Boston or Carmel or Charlotte or Chicago or Cincinnati or Cleveland or Columbus or Culver City or Denver or Des Moines or Detroit or Hartford or Houston or Irving or Miami or Milwaukee or Minneapolis or Morristown or Mountain View or New York City or Overland Park or Philadelphia or Pittsburgh or Raleigh or Sacramento or San Diego or San Francisco or Scottsdale or Seattle or St. Louis or St. Petersburg or United States
$80k-$294k/yrOnsiteFull Time
AccentureNYSE: ACN: Global professional services firm providing consulting and technology solutions.
5+ YOERequires 5+ years in SAP S/4 or cloud environments, technical documentation, SAP security, GRC, vulnerability management, and a bachelor's degree or equivalent experience; leadership and client consulting skills required.
SAP S/4HANA, SAP GRC, SAP BTP, SAP Fiori, SAP HANA, NextLabs, Security Bridge, Onapsis
Latham & Watkins: Global law firm providing legal services for complex corporate matters.
10+ YOE2+ Mgmt10+ years in GRC/technology risk/compliance or related fields, 2+ years leadership, bachelor’s or equivalent experience preferred, security audit and ISO27001 experience, CISA/CISSP/CISM preferred, project management experience, strong communication skills.
California State University: Public university system providing higher education and academic research.
5+ YOEBachelor's degree or equivalent education and experience, 5+ years in information security, governance, risk, compliance, auditing, or IT, including 3+ years in GRC functions and cross-stakeholder coordination.
NIST, PCI DSS, GLBA, HIPAA, CISM, CISA, CRISC, CISSP, E-Verify, Microsoft Form 700
Sony Pictures Entertainment: Produces and distributes theatrical movies and television programs globally.
8+ YOERequires 8+ years in IT compliance, audit, or risk management; SOX, COSO, ITGC, and technology governance expertise; bachelor's degree; CISA; and experience leading global SOX programs and technology initiatives.
Distribution/Vegetation Management Asset Strategy, Advisor (Pomona, CA, US, 91768)
Pomona or California
HybridFull Time
Edison InternationalNYSE: EIX: Generating and distributing electricity to customers in Southern California.
7+ YOESeven+ years in strategic planning at department/organization level; experience in utility asset/vegetation management, geospatial and data analysis, regulatory filings (GRC/WMP/RAMP), stakeholder coordination, and communication materials.
Southern California EdisonNYSE: EIX: Electric utility providing electricity transmission and distribution services.
7+ YOESeven+ years in strategic planning at department/organization level; bachelor’s preferred; experience with utility asset or vegetation management, geospatial data analysis, regulatory filings (GRC/WMP), AI integration, and executive communications.
SpaceX: Designs and launches advanced rockets and satellite internet constellations.
1+ YOEBachelor's degree or 3+ years managing cyber assurance for classified systems; 1+ years cyber assurance; RMF A&A lifecycle experience; familiarity with Nessus, Splunk, Security Center, ServiceNow, eMASS, and GRC tools; active TS/SCI clearance and CI polygraph or ability to obtain.
RMF, Nessus, Splunk, Security Center, ServiceNow (SNOW), eMASS, GRC, NRO A&A, JSIG A&A
Hyundai America Technical CenterKorea Exchange: 005380: Designs and engineers vehicles for the North American market.
6+ YOEBachelor’s degree or equivalent practical experience and 6+ years in privacy technology, GRC, workflow platforms, data governance, security, or related technical implementation. Workflow SaaS, automation, integrations, and privacy frameworks experience required.
PriSMA, SaaS, ISO 27701, ISO 27001, ISO 27002, ISO 42001
CarParts.comNASDAQ: PRTS: Online retailer of automotive aftermarket parts and accessories.
8+ YOE3+ MgmtRequires 8+ years in cybersecurity/GRC, 3+ years in leadership, PCI-DSS and SOX experience, audit committee or board presentation experience, and a track record scaling GRC functions.