Senior Project Manager, GRC

Role Description

Coterie's GRC team is hiring a Senior Project Manager to own remediation projects tied to SOC 2, ITGC, and regulatory compliance requirements, including emerging regulations in privacy, AI governance, and security. The role also supports recurring compliance programs, such as the annual risk assessment cycle, from a scheduling and tracking standpoint, maintaining visibility into risk treatment plan status. While the role reports through GRC, projects may span security, legal, compliance, finance, and other functions depending on business need. The ideal candidate combines strong project management discipline with enough technical fluency to work credibly with engineers and security practitioners including translating security and compliance requirements into work technical teams can execute, along with the ability to build the reporting and dashboards leadership needs to track progress.

Key Responsibilities

• Remediation Project Management:
  • Own end-to-end delivery of remediation projects tied to SOC 2, ITGC, and regulatory compliance requirements.
  • Translate audit findings, control gaps, and new regulatory obligations into scoped plans, milestones, and assigned owners.
  • Drive projects to closure, managing 2 to 4 concurrent projects across security, legal, compliance, finance, or other functions.
  • Maintain a project plan with tracked risks, issues, and dependencies, escalating blockers before they affect timelines.
  • Translate security and compliance requirements into clear, actionable work for engineering and technical teams.
  • Apply Agile, waterfall, or hybrid methodologies as fits the regulatory deadline driving the work.
• Risk & Compliance Program Tracking:
  • Support the annual risk assessment cycle and similar recurring compliance programs.
  • Maintain schedules, coordinate stakeholder input and deadlines, and keep deliverables on time.
  • Track and report the status of risk treatment plans across owners and due dates, flagging at-risk items.
  • Maintain project and risk-tracking data in the team's project management or GRC/IRM platform (e.g., Jira, Optro).
  • Coordinate with external auditors as needed to confirm remediation deliverables meet audit requirements.
• Stakeholder & Executive Reporting:
  • Serve as the primary point of contact for remediation and project status across various stakeholders.
  • Build and maintain leadership-facing reporting and dashboards showing remediation progress and risk treatment plan status.
  • Deliver clear, concise status updates and risk escalations to executive leadership and governance forums.
  • Facilitate project meetings and working sessions, documenting decisions and action items and tracking them to closure.
• Process Improvement:
  • Improve project management and tracking processes, templates, and tooling.
  • Help mature GRC's approach to intake, prioritization, and resourcing of new remediation and compliance tracking work.

Qualifications

• 6+ years of project management experience, including leading complex, cross-functional projects; 2+ years running remediation projects tied to security, compliance, or regulatory findings strongly preferred.
• Experience translating Compliance & Security requirements into technical work and managing requirements traceability through delivery.
• Demonstrated experience building leadership-facing reporting and dashboards to track project, remediation, or risk status.
• Familiarity with frameworks such as SOC 2, ITGC, or similar regulatory and compliance standards.
• Working technical fluency: comfortable discussing cloud infrastructure, APIs, the software development lifecycle, and core security concepts.
• Proven experience managing multiple concurrent projects with competing deadlines and stakeholders.
• Strong command of project management methodologies (Agile, waterfall, or hybrid) and tools (Jira, MS Project, or similar).
• Excellent verbal communication skills, including experience presenting to executive audiences.

Preferred Qualifications (Bonus Experience)

• Experience with written executive communication, such as executive summaries or briefing memos.
• Experience with GRC/IRM platforms (e.g. Optro).
• PMP, CAPM, or equivalent project management certification.
• Security certifications (Security+, CISA, CISSP).
• Experience in insurance, fintech, or another regulated industry.

Our interview process

• Phase 1: Qualified candidates will first meet with a member of our People Operations team for a phone interview.
• Phase 2: Selected candidates will be invited to meet with our Hiring Manager for a 2nd interview via Teams video.
• Phase 3: Top candidates will be invited to the next interview round, which will include an experiential exercise project.
• Phase 4: Final candidates will be invited to a 30-minute final interview with a member of our senior leadership team.

Benefits

• 100% remote
• Health insurance through Aetna (we pay 100% of premiums)
• Dental and vision insurance through Guardian (we pay 100% of premiums)
• Basic life insurance (we pay 100% of premiums)
• Access to flexible spending account (FSA) or health savings account (HSA)
• 401K plan (up 4% match with immediate vest)
• Flexible PTO policy offering employees up to 4 weeks of PTO in their first 12 months
• 12 company-paid holidays each year
• Continuing education annual stipend
• Annual salary estimated between $115,000-$140,000

Work Authorization

At this time, Coterie Insurance is unable to consider candidates who require current or future visa sponsorship. Applicants must have authorization to work in the United States without the need for sponsorship now or in the future.