Security Risk Operations Lead

What you'll do

• Lead rapid risk decisions by coordinating timely reviews, approvals, and escalations for decision-makers.
• Drive cross-functional projects and strategic initiatives by managing priorities, milestones, and deliverables.
• Own and improve risk workflows for security issue management, policy exceptions, and remediation.
• Partner with engineering and compliance teams to align priorities and clear operational blockers.
• Build scalable processes, operating standards, and escalation paths to ensure consistent governance.
• Define and improve metrics, dashboards, and leadership reports to track risk exposure and program effectiveness.
• Develop automated workflows with engineering and platform teams to reduce manual work.

What we're looking for

• You must have 8+ years of experience in governance, risk, and compliance (GRC), information security risk management, or a related area.
• You must have experience leading cross-functional projects.
• You must understand security risk management, including assessments, findings, policy exceptions, risk acceptance, remediation, and governance.
• You must be able to communicate clearly, influence cross-functional teams, and drive accountability and risk-based decisions.
• You must be able to design and improve GRC processes with a focus on efficiency, scalability, and automation.
• You must be able to use GRC platforms, operational metrics, and reporting to support leadership decisions.
• You should have experience turning security, risk, regulatory, or compliance requirements into technical implementation requirements (preferred).
• You should know security controls and frameworks such as NIST, ISO 27001, SOC, SOX, or FedRAMP (preferred).