ZipRecruiter

Log In

1

It Governance Risk Compliance Manager Jobs in California

Golden-1-Credit-Union

$93 - $120/hr

Exempt, Reports to: Manager - IT - Governance Risk and Compliance, Department: IT - Governance Risk and Compliance, Job Code: 11349, Pay Range: $92,700.00 - $120,000.00 Annually Location: WHO WE ARE ...

New

Wsgr

Manager, IT Risk Operations

Palo Alto, CA · On-site

$147K - $198K/yr

This high-impact position in the Governance, Risk & Compliance function sits at the center of the ... Managing a small team, you willwork closely with senior leaders across IT, Security Engineering ...

TabaPay

IT Governance Analyst

Palo Alto, CA · On-site

$150K - $160K/yr

Bachelor's degree in Management Information Systems (MIS), Cybersecurity, Finance, or Computer Science. * Fintech/Banking Experience: 5 to 7 years in IT governance, risk, or compliance (GRC) inside a ...

next page

Showing results 1-20

All JobsIt Governance Risk Compliance JobsIt Governance Risk Compliance Manager JobsIt Governance Risk Compliance Manager Jobs in California

It Governance Risk Compliance Manager information

What does an IT Governance Risk Compliance (GRC) manager do?

An IT Governance Risk Compliance (GRC) Manager is responsible for ensuring that an organization's information technology systems comply with regulatory requirements and internal policies. They develop and oversee frameworks for managing IT risks, monitor compliance with standards such as ISO 27001 or SOC 2, and coordinate audits and assessments. Their role also involves advising leadership on risk mitigation strategies, training staff on compliance issues, and continuously improving IT governance practices. By doing so, they help protect the organization from legal, financial, and reputational risks associated with non-compliance and cyber threats.

What are the key skills and qualifications needed to thrive as an IT Governance Risk Compliance (GRC) manager?

To thrive as an IT Governance Risk Compliance Manager, you need a strong understanding of IT risk management, regulatory frameworks (such as SOX, GDPR, or ISO 27001), and a relevant degree, often backed by certifications like CISA, CISSP, or CRISC. Familiarity with GRC platforms (e.g., RSA Archer, ServiceNow GRC), audit management tools, and compliance tracking systems is typically required. Exceptional analytical thinking, communication, and stakeholder management skills enable you to translate technical risks into actionable business strategies. These competencies are critical to ensuring organizational compliance, minimizing risk exposure, and aligning IT practices with business objectives.

How does an IT Governance Risk Compliance (GRC) manager typically collaborate with other departments to ensure organizational compliance?

An IT GRC Manager works closely with various departments such as IT, legal, HR, and internal audit to implement and monitor compliance policies and risk mitigation strategies. They often facilitate cross-functional meetings to align security practices with business objectives, provide guidance on regulatory requirements, and coordinate training initiatives. Effective communication and collaboration are key, as the GRC Manager must ensure that all departments understand their compliance responsibilities and are prepared for audits. This collaborative approach helps create a culture of accountability and continuous improvement across the organization.

What is the difference between It Governance Risk Compliance Manager vs IT Security Analyst?

AspectIT Governance Risk Compliance ManagerIT Security Analyst
CertificationsISO 27001 Lead Implementer, CISA, CISSPCISSP, CompTIA Security+, CEH
Work EnvironmentPolicy development, compliance audits, risk assessmentsSecurity monitoring, incident response, vulnerability testing
Employer & Industry UsageFinancial, healthcare, government sectorsIT firms, cybersecurity companies, corporate IT departments

The IT Governance Risk Compliance Manager focuses on establishing and maintaining compliance frameworks, managing risks, and ensuring organizational policies align with regulations. In contrast, the IT Security Analyst primarily monitors security systems, investigates threats, and implements security measures. Both roles require certifications like CISSP but differ in their core responsibilities and daily tasks within the IT industry.

What are popular job titles related to It Governance Risk Compliance Manager jobs in California?

For It Governance Risk Compliance Manager jobs in California, the most frequently searched job titles are:

What job categories do people searching It Governance Risk Compliance Manager jobs in California look for?

The top searched job categories for It Governance Risk Compliance Manager jobs in California are:

What cities in California are hiring for It Governance Risk Compliance Manager jobs?

Cities in California with the most It Governance Risk Compliance Manager job openings:

It Governance Risk Compliance Manager jobs near you

Manager, IT Risk Operations

Wilson Sonsini Goodrich & Rosati, Professional Corporation

Palo Alto, CA • On-site

$147.05 - $220.80/hr

Other

Posted 3 days ago

New

Key responsibilities

  • Lead the firm's IT risk, security, and operational governance activities.

  • Develop executive-level reporting and dashboards on IT risk, compliance, and operational performance.

  • Partner with teams to investigate incidents, analyze data, and optimize workflows within ServiceNow.

Job description

Wilson Sonsini is the premier legal advisor to technology, life sciences, and growth enterprises worldwide. We represent companies at every stage of development, from entrepreneurial start-ups to multibillion‑dollar global corporations.

Job Summary

The Governance, Risk & Compliance Manager will lead the firm’s IT risk, security, and operational governance. The role is highly collaborative, working closely with senior IT, Security Engineering, General Counsel, and firm leadership. It can be 100% remote or hybrid near a physical office.

Key Responsibilities
  • Strengthen IT Governance & Controls: develop executive‑level reporting on IT risk, compliance posture, and operational performance.
  • Build and evolve KPI/KRI dashboards that provide real‑time visibility into risk trends and control effectiveness.
  • Translate complex IT and security data into meaningful insights for decision‑making.
  • Ensure adherence to IT policies, standards, and leading frameworks (e.g., NIST, ISO 27001).
  • Own and evolve the firm’s IT risk register and Risk & Control Self‑Assessment (RCSA) program.
  • Identify emerging and systemic risks across IT, security, privacy, and operational processes.
  • Incident Governance & Investigations: partner with General Counsel, Security, and IT to lead internal investigations.
  • Own ITSM Governance & ServiceNow Analytics: oversee governance and reporting across the IT Service Management ecosystem.
  • Analyze incident, change, and problem management data to identify trends and improvement opportunities.
  • Drive workflow optimization and automation within ServiceNow.
  • Vendor Risk Management: review and advise on vendor agreements; enhance vendor risk processes including risk tiering, assessments, and monitoring.
  • Introduce data‑driven approaches to risk management and operational oversight.
  • Perform related duties as assigned or directed by supervisor and maintain compliance with all firm policies and procedures.
Qualifications
  • Bachelor’s degree preferred.
  • Seven years of experience in IT risk, security compliance, technology audit, or IT governance preferred.
  • Experience operating in complex, regulated environments (e.g., law firms, financial services, consulting) preferred.
  • Proven ability to lead reporting, analytics, and governance initiatives.
  • Familiarity with ServiceNow and ITSM reporting, including understanding of incident, change, and problem management lifecycles.
  • Experience with security and collaboration platforms such as Microsoft 365, Purview, and email security tools.
  • Working knowledge of frameworks such as the NIST Cybersecurity Framework, ISO/IEC 27001, and SOC 2.
  • Strong understanding of control design, risk registers, RCSA programs, and audit response.
  • Basic understanding of privacy regulations.
  • Preferred certifications: CISA, CISSP, CRISC, CTPRM, and/or ITIL.
Compensation and Benefits

Compensation includes a base salary that varies by location, with discretionary year‑end merit bonus potential. Base pay ranges from $147,050 to $220,800 per year depending on geographic region. Benefits information is provided separately upon request.

Other Information

Primary location: Palo Alto, CA (other locations may be considered). The role may be performed remotely or in a hybrid model if the candidate resides near an office.

Equal Opportunity Employer (EOE).

#J-18808-Ljbffr

Apply