Manager, GRC Program Lead

Reporting directly to the VP of Information Security, this role involves owning and enhancing Aya’s enterprise Governance, Risk, and Compliance (GRC) program. The primary focus is on overseeing the ServiceNow GRC / IRM configuration and optimization, leading audits for SOC 2 and ISO/IEC 27001:2022 compliance, and creating informative dashboards for effective communication with leadership.

Key Responsibilities

• Responsible for day-to-day management and enhancement of Aya’s enterprise GRC program.
• Lead configuration, optimization, and adoption of ServiceNow GRC / IRM.
• Design scalable automated controls and workflows based on specific requirements.
• Lead readiness, audits, and remediation efforts for SOC 2 and ISO/IEC 27001:2022 compliance.
• Develop dashboards and metrics to effectively communicate the organization's security posture to leadership.

Requirements & Qualifications

• 5+ years of experience in Governance, Risk, and Compliance (GRC) or Information Security.
• 2+ years of hands-on experience with ServiceNow GRC/IRM configuration and workflow design.
• Experience in managing or contributing to a modernized GRC program.
• Strong knowledge of SOC 2 and ISO/IEC 27001:2022 compliance frameworks.
• Proven ability to lead and mentor analysts, with strong cross-team communication skills.
• Demonstrated cross-functional influence and strategic orientation.