Bumble-posted 2 months ago
$185,000 - $210,000/Yr
Full-time • Senior
Hybrid • Austin, TX
501-1,000 employees
Publishing Industries

At Bumble, we're building secure, AI-driven systems that empower connection and trust globally. Security and privacy are at the heart of that mission. We're looking for a Senior Security GRC Program Manager to lead our PCI, SOX, ITGC, and GDPR programs - driving audit excellence, automation maturity, and cross-functional compliance alignment across Bumble's products and infrastructure. This role is ideal for someone who thrives in fast-moving environments and knows how to transform compliance from a checkpoint into a scalable, automated enabler of trust.

  • Own Bumble's Core Compliance Programs: Lead end-to-end management of PCI, SOX, ITGC, and GDPR frameworks - from annual audit planning through evidence collection, remediation, and executive reporting.
  • Drive Audit Efficiency & Automation: Partner with Security Engineering, Finance IT, and Product teams to automate evidence workflows, control attestations, and testing pipelines via tools such as Drata, Vanta, or ServiceNow GRC.
  • Lead SOX & ITGC Program Delivery: Co-own SOX ITGC compliance with Finance IT, directly manage external audit partners, and maintain strong control hygiene across identity, change management, and infrastructure layers.
  • Oversee PCI Compliance Operations: Maintain Bumble's PCI program scope, manage annual assessments, and coordinate with payments and infrastructure teams to ensure ongoing adherence and minimal audit fatigue.
  • Steward GDPR Alignment: Partner with Legal, Privacy, and Data Engineering to operationalize GDPR requirements, ensuring data protection principles and privacy-by-design controls are consistently validated.
  • Report Risk & Remediation Metrics: Build dashboards and KPI reports that provide visibility into audit readiness, control performance, and remediation progress for executive stakeholders.
  • 6+ years of experience in Security GRC, audit, or compliance within a cloud-native or technology-driven environment.
  • Proven ownership of PCI, SOX, ITGC, and GDPR compliance programs - from planning through audit closure.
  • Demonstrated success driving measurable improvements in audit efficiency, control maturity, or automation adoption.
  • Strong working knowledge of cloud architectures (AWS, GCP) and common ITGC control areas - including access management, change management, and incident response.
  • Experience integrating GRC tools with engineering systems (e.g., CI/CD pipelines, Jira, Slack, or identity platforms like Okta).
  • Ability to design or refine control automation workflows and collaborate with engineers on technical control implementation.
  • Practical understanding of data flow mapping and system-of-record validation to support GDPR evidence and privacy controls.
  • Track record of leading multi-stakeholder audits (Finance, Legal, Engineering, Privacy) and aligning diverse teams on deadlines and deliverables.
  • Skilled at presenting complex audit or risk topics to executive leadership using concise, data-driven insights.
  • Capable of drafting clear, audit-ready documentation and control narratives without excessive bureaucracy.
  • Hands-on experience automating evidence collection or audit testing workflows.
  • Familiarity with data protection impact assessments (DPIAs) and GDPR privacy operations.
  • Experience building or maintaining risk registers, executive dashboards, or compliance OKRs/KPIs.
  • Certifications such as CISA, CISM, CISSP, CRISC, or ISO Lead Auditor.
  • Background in payments, fintech, or regulated SaaS environments.
  • $10,000 lifetime benefit opportunity for reproductive journey support.
  • Family leave to support you and your loved ones when needed.
  • 26 weeks paid parental leave for primary and secondary caregivers.
  • Unlimited paid time off.
  • Company-wide week off once a year.
  • Focus Fridays with no meetings or deadlines.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service