Senior IT Governance & Compliance Manager

LogicGate•Chicago, IL

5d•$115,000 - $140,000•Onsite

About The Position

LogicGate is seeking a Senior IT Governance & Compliance Manager to serve as a principal subject matter expert and trusted advisor driving our enterprise security and compliance posture. In this high-impact individual contributor role, you will partner cross-functionally with Sales, Legal, Product, and Engineering to embed risk-aware thinking across the business while streamlining audit readiness and vendor risk operations. You will balance regulatory rigor with business agility, using automation and modern GRC strategies to safeguard customer trust and accelerate enterprise growth.

Requirements

7+ years of progressive experience in IT governance, risk, and compliance (GRC), IT auditing, or cybersecurity, with a track record of driving enterprise compliance programs.
Deep hands-on experience managing and auditing frameworks such as SOC 2 Type II, ISO 27001, NIST CSF, and relevant data privacy regulations (GDPR, CCPA).
Demonstrated experience leveraging AI tools, LLMs, or automated GRC platforms to streamline evidence collection, vendor risk evaluations, or security questionnaire workflows.
Strong consultative and advisory skills with a proven ability to translate complex risk concepts into clear, business-focused recommendations for executive leadership and cross-functional partners.
Willingness and ability to travel as needed for team planning workshops, customer meetings, and company gatherings.

Nice To Haves

Hold active professional certifications such as CISA, CRISC, CISM, or CISSP.
Direct experience administering or building workflows in modern GRC platforms (ideally LogicGate Risk Cloud).
Familiarity with emerging AI governance frameworks (e.g., NIST AI RMF, ISO 42001) or evaluating risk within cloud-native environments (AWS).

Responsibilities

Drive the continuous maturity, scaling, and operational excellence of LogicGate's IT governance, risk, and compliance frameworks in alignment with evolving business goals and regulatory standards.
Own and scale our Third-Party Risk Management (TPRM) program end-to-end, conducting thorough risk assessments of vendors and subprocessors to deliver actionable risk mitigation strategies.
Partner with Sales and Revenue Operations to handle complex enterprise customer security inquiries, leveraging automation to accelerate response times and remove deal friction.
Provide expert risk and compliance guidance on cybersecurity contract terms, vendor agreements, and strategic business initiatives in close collaboration with Legal and Operations.
Lead internal preparation and external audit execution for SOC 2 Type II, ISO 27001, and recurring compliance attestations to demonstrate ongoing control effectiveness.
Author, maintain, and enforce enterprise security policies, standards, and risk management frameworks that support a high-performance, security-first culture.
Evaluate and deploy modern AI-driven tools, automated evidence-gathering workflows, and platform intelligence to eliminate manual compliance overhead and optimize program performance.
Act as an internal authority and external representative on IT governance, providing actionable insights on emerging industry trends, regulatory changes, and GRC best practices.