GRC Program Manager (d/f/m)

2 weeks, 2 days ago
Full-time
Senior
Cybersecurity
vivenu

vivenu

vivenu is a cutting-edge ticketing platform revolutionizing event ticketing with a customer-centric approach, empowering organizers to create exceptional experiences for attendees.

Media
51-250
Founded 2018
$66M raised

Description

  • Own end-to-end delivery of GRC initiatives, including timelines, dependencies, and milestone tracking.
  • Lead internal audit operations for third-party audits such as SOC 2 Type II and PCI DSS.
  • Manage audit scoping, evidence collection, control-owner coordination, and remediation efforts.
  • Maintain and mature compliance frameworks for global requirements including GDPR and related security standards.
  • Conduct IT, security, and third-party risk assessments and maintain the risk register.
  • Track risk treatment plans and corrective actions through to closure.
  • Use GRC platforms and automation tools to streamline audits, policy administration, vendor risk management, and remediation workflows.
  • Partner with engineering and product teams to embed security controls, privacy-by-design, and cloud best practices into the development lifecycle.
  • Support enterprise sales by responding to security questionnaires and third-party risk reviews.
  • Prepare leadership reporting, including risk dashboards, KRIs, and operational updates.

Requirements

  • Proven track record of driving cross-functional projects and holding teams accountable to deliverables.
  • Hands-on experience leading compliance audits such as SOC 2, PCI DSS, or ISO 27001 from start to finish.
  • Experience in SaaS, fintech, or cloud-native technology environments is highly preferred.
  • Demonstrated exposure to GRC and security processes such as risk assessments, internal audits, policy development, and corrective action management.
  • Working knowledge of standards and frameworks including SOC 2, PCI DSS, ISO 27001, GDPR, and NIST CSF/RMF.
  • Strong ability to translate regulatory requirements into clear operational steps for technical and business stakeholders.
  • Business fluency in English is required.
  • Basic technical familiarity such as scripting, APIs, or reading system logs/configurations is a plus.
  • Experience with GRC automation tools such as Vanta, Drata, ServiceNow IRM, or LogicGate is a plus.
  • Professional certifications such as CRISC, CISA, CISM, CISSP, CSSP, or ISO/IEC 27001 Lead Auditor are a plus.
  • German language proficiency is a plus.

Benefits

  • Work on a mission-critical role for global live entertainment brands.
  • Join a profitable, VC-backed company with sustainable growth and product-market fit.
  • Collaborate with a team of 160+ professionals, including leaders from Google, Slack, and Salesforce.
  • Be part of a diverse, merit-driven team across six global offices.
  • Work at one of Europe’s fastest-growing scale-ups.
  • Learn alongside experienced founders and executives recognized across the tech industry.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Program Manager

9th Way Insignia 51-250 Internet Software & Services

9th Way Insignia is seeking a Program Manager to lead a VA cybersecurity program, coordinating teams, stakeholders, resources, schedules, risks, and deliverables to strengthen enterprise security and protect critical systems.

Cybersecurity DevSecOps Encryption
16 hours, 34 minutes ago

Director, Program Delivery

Huge 251-1K Media

Huge is seeking a remote U.S.-based Director of Program Delivery to lead complex, multi-disciplinary client engagements from strategy through high-quality product delivery.

17 hours, 4 minutes ago

Program Manager, Executive Experiences

Stripe 5K-10K Diversified Financial Services

Stripe is seeking an Executive Experiences Program Manager to lead global operations, budgets, and execution for high-profile executive programs that strengthen leadership engagement and inform the company’s go-to-market direction.

Asana
17 hours, 4 minutes ago

Associate Clinical Team Lead

Rho 251-1K Biotechnology

Rho is hiring a remote Associate Clinical Team Lead to support clinical operations oversight, CRA leadership, compliance, and stakeholder coordination across clinical research projects, with occasional travel.

17 hours, 34 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers