GRC Manager at Fragomen overseeing governance, risk, and compliance for data privacy and security. Leading a team to develop risk management frameworks aligned with business objectives and regulatory requirements.
Responsibilities
Lead, mentor, and grow a team of compliance analysts and GRC professionals
Provide strategic direction, technical guidance, and foster a culture of continuous improvement
Develop and operationalize a risk management program that proactively identifies, assesses, and mitigates organizational and third-party risks, with clear alignment to business priorities
Design and manage a comprehensive GRC framework, including risk assessments, controls implementation, and governance practices
Partner with Information Security, IT, Privacy, Audit, and Legal to build a unified view of the firm’s security and data privacy posture and convey that view to clients and stakeholders
Establish KPIs and dashboards to monitor risk levels, compliance progress, and the effectiveness of controls; regularly report key risk insights to senior leadership and the Risk Committee
Conduct Data Privacy Impact Assessments (DPIAs), maintain a central risk register, and oversee the mitigation of identified gaps across people, process, and technology
Ensure ongoing adherence to industry standards (e.g., ISO 27001, SOC 2, PCI DSS, NIST) by maintaining audit-ready documentation and leading evidence-gathering activities
Requirements
7+ years of experience in governance, risk, and compliance (GRC), risk management, or information security
Demonstrated experience leading risk management initiatives and teams
Professional certifications such as CISA, CISSP, CIA, or similar strongly preferred
Deep knowledge of global security and privacy frameworks, including ISO 27001, SOC 2, PCI DSS, NIST 800 series, EU GDPR, and related regulatory regimes
Strong analytical and communication skills with the ability to translate complex risks into actionable strategies for business and technical stakeholders
Excellent organizational and project management skills, with attention to detail and an ability to manage multiple priorities
Experience working with cross-functional, global teams and third-party vendors
Benefits
22 PTO days + Federal holidays
Medical, Dental, and Vision plans + FSA & HSA Plans
Compliance Intern offering forensic analysis support for Johnson & Johnson. Engaging in audits and analytical tasks in a hybrid work environment in New Brunswick, NJ.
Director, Global Regulatory Leader responsible for global regulatory strategies in innovative medicine for investigational products. Leading cross - functional teams and ensuring regulatory compliance with health authorities.
Compliance Manager overseeing United Rotorcraft’s compliance initiatives with federal standards. Ensuring audit readiness and managing supplier compliance and training programs.
Regulatory Compliance Projects Manager at Betclic ensuring compliance in product development and coordinating regulatory matters across jurisdictions. Leading cross - functional projects in a dynamic environment.
Trade Compliance Officer managing US trade compliance operations for Thales' InFlight Entertainment Business Line. Developing and implementing comprehensive trade compliance programs aligned with regulatory requirements.
Quality & Compliance System Senior Specialist overseeing Quality Management Systems in a global biopharmaceutical company. Ensuring GMP compliance and continuous improvement in quality processes.
Supports the Covenant Compliance Review Department for commercial credit relationships at Origin Bank. Involves financial documentation maintenance and client relationships management.
Covenant Compliance Review Analyst responsible for monitoring covenant compliance tests and financial statements. Supporting Relationship Managers with compliance and documentation for commercial clients.
Quality and Compliance Specialist ensuring compliance with dietary supplement regulations and quality management. Supporting quality programs and regulatory affairs under the Director of R&D and Regulatory Affairs.