Senior Manager, GRC Governance & Enablement

The role:

The Senior Manager, GRC Governance & Enablement leads the governance and enablement capabilities that help ensure GRC and Independent Risk Management changes are controlled, tested, secure, release-ready, and successfully adopted.

This role sits within the Second Line Of Defense (2LOD) and is responsible for key disciplines including organizational change management, QA and testing governance, security and access governance, release readiness, adoption, training, communications, governance evidence, and operating standards. The role partners closely with the GRC Business Systems Director, Business Analyst, business process owners, Functional Approvers, Design Authority representatives, technology teams, and implementation partners to support both transformation initiatives and ongoing BAU sustainment.

The position also plays an important role in shaping the future-state GRC operating model by establishing scalable governance practices that support growth, regulatory expectations, user experience, data accuracy, and operational efficiency.

What you’ll do: 

• Lead the GRC change management and enablement framework, including stakeholder readiness, communications, training, adoption, reinforcement, and change governance.
• Establish and maintain QA and testing standards, including test planning, UAT governance, defect management, traceability, regression testing, sign-off, and testing evidence.
• Oversee security and access governance for GRC capabilities, including roles, groups, access approvals, periodic reviews, reconciliations, and supporting control evidence.
• Define and govern release-readiness standards for implementations, enhancements, and material production changes.
• Ensure appropriate readiness criteria are met across testing, security, communications, training, business approvals, support preparation, and BAU transition before release.
• Develop and maintain governance standards, required evidence, decision records, approval artifacts, and readiness documentation.
• Identify gaps in governance, control execution, documentation, or readiness and coordinate remediation with the appropriate business and technology teams.
• Lead development of adoption, training, and communications strategies tailored to impacted stakeholder groups.
• Monitor adoption and user experience and identify opportunities to improve usability, effectiveness, and change outcomes.
• Support development of the future-state GRC operating model, governance framework, and scalable delivery practices.
• Identify opportunities to standardize, automate, simplify, and improve GRC lifecycle and governance processes.
• Partner with technology teams and implementation partners to ensure new capabilities are designed with sustainment, controls, readiness, and BAU ownership in mind.
• Collaborate closely with the Business Analyst to align governance, change, testing, security, and readiness activities with day-to-day delivery and BAU priorities.
• Balance strategic future-state planning with near-term delivery needs, ensuring BAU enhancements, testing, release readiness, governance, and change activities remain coordinated and appropriately prioritized.
• Support executive and leadership reporting related to readiness, governance, adoption, risk, and delivery quality.

What you’ll need:

• Bachelor’s degree or equivalent relevant experience
• Experience with ServiceNow IRM/GRC or comparable enterprise GRC platforms.
• 8+ years of experience across one or more of the following areas: GRC, risk management, business systems, organizational change management, technology delivery, QA/testing, security governance, or transformation
• Demonstrated experience leading cross-functional initiatives involving business, technology, risk, compliance, and third-party partners
• Experience developing and implementing governance, readiness, testing, change, or operating-model standards
• Strong understanding of regulated environments and the importance of control evidence, approvals, traceability, data quality, and governance
• Strong stakeholder management and executive communication skills
• Demonstrated ability to manage multiple priorities across both strategic and operational work
• Experience leading or managing people, including coaching, prioritization, and performance support
• A collaborative team player with a positive attitude
• Comfortable presenting ideas and solutions to stakeholders at all levels of the organization
• Change leadership — anticipates resistance, adoption risks, and operational impacts and adjusts the approach accordingly
• Continuous-improvement mindset — looks for opportunities to simplify, automate, standardize, and improve both the solution and the operating model

Nice to have:

• Familiarity with SoFi’s existing risk, compliance, and audit processes is a strong advantage
• Familiarity with Agile delivery, backlog management, sprint refinement, Scrum ceremonies, and hybrid Agile/Waterfall environments.
• Demonstrated knowledge of GRC Intelligence Dashboards and Management Reporting