Governance, Risk & Compliance (GRC) Manager

Governance, Risk & Compliance (GRC) Manager Job Category : Information Technology Requisition Number : GOVER010537 Posted : July 27, 2026 Full-Time Remote Locations Showing 1 location 01-Seattle Seattle, WA 981012635, USA Description

POSITION SUMMARY:

This position manages the corporate governance, risk, and compliance (GRC) teams, including internal security review, security contract review, and vendor risk management. The GRC Program Manager supervises employees across experience levels and works with IT compliance stakeholders to assess risk and provide practical guidance aligned with Milliman’s risk appetite. The position works with 60+ offices worldwide and their local administrators to coordinate internal assessments, support external audits, and identify and assess critical vendors. The position reports directly to the Chief Information Security Officer (CISO) and resides within Global Corporate Services (GCS). The GRC Manager will support program planning, staff supervision, and execution of GRC-related projects. This position will oversee the technical work of GRC team personnel and work directly with IT leads, managers, the project management office (PMO), and executives to communicate relevant business and technical information. The GRC Manager will set performance expectations for team members and provide regular, constructive feedback.

RESPONSIBILITIES:

Manage the Global GRC team across regions and serve as an escalation point for complex issues. Support Talent Management: Support hiring, performance reviews, compensation discussions, and staffing decisions. Support Client Engagement: Work with GCS Legal and business stakeholders on information security contract requirements, escalating to the CISO as needed. Monitor Regulatory Requirements: Monitor applicable requirements, including HIPAA, GDPR, and CCPA, and assess impact to GRC responsibilities. Support Compliance Initiatives: Work with GDPT and internal stakeholders to support regulatory and client compliance requirements. Oversee Vendor Risk Management: Oversee vendor security risk processes and support alignment with vendor management. Track Team Performance: Monitor team performance against SLAs and address gaps as needed. Report on Program Performance: Provide program updates and align GRC work with organizational priorities. Coordinate with IT, Legal, Finance, and GCS leadership on risk and compliance priorities. Communicate and Share risk and compliance updates and support targeted security training when policies or gaps require it.

FUNCTIONAL COMPETENCIES:

Ability to find opportunities for efficiencies, using state of the art software tools and AI Risk Management: Understanding of risk management methodologies, frameworks, and principles for measuring, reporting, and mitigating risk. Communication & Collaboration: Ability to communicate clearly with business and technical stakeholders and translate technical concepts into practical guidance. Project & Time Management: Ability to manage multiple projects, prioritize work, and support timely completion of assigned activities. Global & Cross-Functional Engagement: Ability to work with stakeholders across geographically dispersed offices and support coordination across business functions.

SKILLS & QUALIFICATIONS REQUIRED:

Bachelor's degree in Risk Management, Information Systems, Computer Science, or Cybersecurity (or equivalent years of relevant professional hands-on work experience). The ideal candidate should have minimum 7 years of hands-on IT Cybersecurity or Risk Management experience.

SKILLS & QUALIFICATIONS PREFERRED:

Certified in at least one of the following: Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or willingness to obtain. Experience using GRC/VRM tools and platforms. Experience with HIPAA/HITRUST, GDPR, ISO 27001 /2, and other industry regulatory controls and compliance. Experience within consulting or professional service organizations. #J-18808-Ljbffr Milliman Ireland