Technology GRC / IT Risk & Compliance Manager
Open a video or resource link, watch it, then check its box to track your progress and unlock what comes next.
- Establish a risk-based governance model, policy structure and control-framework language leaders can act on
- Test controls, manage evidence and third-party/cloud risk through repeatable compliance operations
- Scale multi-framework assurance, continuous controls monitoring and AI-era governance to executives
Benchmark: Current technology-risk/GRC leadership roles + NIST CSF 2.0 / Cyber AI Profile + ISACA risk and IT-audit practice + Microsoft Purview + AWS cloud-control automation (current Sep 2026) Current bar: cyber/technology risk governance, policies and standards, NIST/ISO/SOC 2/PCI/SOX-ITGC mapping, control design and testing, evidence/audit readiness, third-party risk, remediation and exceptions, continuous cloud compliance, GRC tooling/automation, executive risk reporting and AI/agent governance.
Search Live Openings
We don’t have a direct job-board feed matched to this one yet, so here are real, live US job searches for “Technology GRC / IT Risk & Compliance Manager” instead.
Establish a risk-based governance model, policy structure and control-framework language leaders can act on
Cyber/technology risk governance + NIST CSF 2.0
Coverage: Risk Taxonomy / Risk Register / CSF Govern / Profiles / Treatment / Risk Acceptance
Control frameworks, policies + compliance mapping
Coverage: Control Library / ISO 27001 / SOC 2 / NIST / PCI / Policies / Assessments / Gaps
Test controls, manage evidence and third-party/cloud risk through repeatable compliance operations
ITGC, control testing + audit evidence
Coverage: Access / Change / Operations / Backups / Control Design / Operating Effectiveness /
Third-party risk + continuous cloud compliance
Coverage: TPRM / Vendor Lifecycle / Due Diligence / Continuous Monitoring / Cloud Controls /
Scale multi-framework assurance, continuous controls monitoring and AI-era governance to executives
GRC automation, metrics + executive assurance
Coverage: Control Automation / Continuous Monitoring / KRIs / Remediation / Dashboards / Audit
AI/agent governance + emerging technology risk
Coverage: AI Risk / Agentic Systems / Identity / Model Supply Chain / Control Overlays / Assurance
Role-Readiness Proof / Capstone
Complete a 5-day Technology GRC Operating-System Lab: define technology-risk taxonomy and appetite; build a risk register and CSF 2.0 profile; create a common control library mapped across NIST, ISO 27001, SOC 2 and an ITGC/SOX scenario; design evidence requirements and test operating effectiveness; assess a third party and cloud workload; log findings, exceptions and remediation owners; automate one control/evidence workflow and dashboard; add AI/agent governance controls; run an audit-readiness review and present residual risk, KRIs and treatment decisions to an executive risk committee.
Proof Rubric
- Risk-based prioritization
- coherent control mappings
- clear policy/control ownership
- defensible design and operating-effectiveness tests
- high-quality audit evidence
- mature TPRM and remediation workflow
- measurable KRIs/control health
- appropriate exceptions and risk acceptance
- automated controls with human oversight
- AI/agent risk coverage
- concise executive reporting and traceable residual-risk decisions