Senior Manager, Governance, Risk and Compliance
About The Position
Metropolis is seeking a Senior Manager, GRC to lead our Governance, Risk, and Compliance function across our evolving ecosystem, including recently acquired entities. In this role, you will own the strategy and execution of our audit lifecycles, risk management frameworks, and compliance programs. You are a seasoned leader who can translate complex regulatory requirements into practical, scalable controls while partnering closely with Engineering, IT, and executive leadership to ensure our security posture remains world-class as we scale.
Requirements
- Experience establishing governance over emerging technologies (e.g., AI/ML) in fast-paced or highly distributed environments
- Strong understanding of AI/ML risk domains, including model governance, data privacy, bias, and regulatory considerations
- Familiarity with tools and approaches for monitoring AI usage, managing data access, and enforcing governance across SaaS and internally developed systems
- Forward-thinking mindset toward scaling GRC through automation, analytics, and intelligent tooling
- Experience in the following tools: GRC Platforms: Vanta, Drata, Secureframe, AuditBoard, OneTrust Identity & Access Management: JumpCloud, Okta, Active Directory Cloud & Infrastructure: AWS, GCP, Azure Cloud Security (CNAPP): Wiz Security & Monitoring: CrowdStrike, Datadog, SIEM platforms Collaboration & Workflow: Jira, Confluence, Slack, Google Workspace Data & Evidence Collection: APIs, scripting, and automation tools (e.g., Python, no-code/low-code platforms
Responsibilities
- Establish and lead governance frameworks for AI/ML systems, including policies, standards, and controls related to model risk, data usage, and regulatory compliance
- Partner with Engineering, Data, Product, and Security teams to assess and manage risks associated with AI systems, including data privacy, bias, explainability, and third-party model usage
- Define and operationalize processes for inventorying, classifying, and monitoring AI/LLM usage across the organization, ensuring alignment with internal policies and emerging regulatory requirements
- Develop and enforce guardrails for responsible AI adoption, including data protection, access controls, and acceptable use standards
- Leverage AI and automation to scale GRC workflows, including evidence collection, control monitoring, risk analysis, and audit readiness
Benefits
- healthcare benefits
- a 401(k) plan
- short-term and long-term disability coverage
- basic life insurance
- a lucrative stock option plan
- bonus plans
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
Number of Employees
5,001-10,000 employees
