Senior Manager - IT Governance, Risk & Compliance (GRC) - Morning Shift

Company Overview

10Pearls is a global, purpose-driven AI-Native digital engineering partner helping businesses re-imagine, digitalize, and accelerate. As an end-to-end digital technology partner, 10Pearls helps businesses create future-proof, transformative digital products that leverage emerging technologies. 10Pearls' clients include Global 2000 enterprises, high growth mid-size businesses, and some of the most exciting start-ups from industries like healthcare, fintech, energy, education, real estate, retail, and hi-tech. Headquartered in the Washington DC metro area, 10Pearls has product engineering and software development centers in North America, Latin America, Europe, and South Asia. To learn more, visit https://10pearls.com.

Role

10Pearls is seeking a Senior Manager – IT Governance, Risk & Compliance (GRC) to lead and strengthen technology governance, risk management, compliance, and control frameworks across enterprise technology environments.

Responsibilities

• Establish and govern stakeholder engagement models and risk governance practices.
• Lead GRC reviews and oversee risk identification, mitigation, monitoring and reporting.
• Manage IT Controls compliance scorecards, metrics and reporting.
• Monitor risk acceptance, transfer, mitigation and deviation processes.
• Ensure Risk Control Self-Assessments (RCSA) alignment with operational risk methodologies.
• Track audit findings and remediation plans to closure.
• Identify control gaps and implement mitigating controls.
• Monitor exceptions, policy deviations and compliance issues.
• Support regulatory examinations, audits and remediation activities.
• Drive governance processes including Change Management, IT Operations, SLA and Disaster Recovery governance.

Requirements

• 10+ years of experience in Information Technology, IT Governance, Risk Management, Audit, or Compliance.
• Strong understanding of IT Governance, Risk Management, Internal Controls and Compliance frameworks.
• Experience conducting technology risk assessments and governance reviews.
• Knowledge of RCSA methodologies and Operational Risk Management.
• Experience with Information Security, Cybersecurity and Vulnerability Management.
• Experience with General IT Controls (GITC) and Application Controls.
• Strong analytical, stakeholder management and communication skills.

Nice to Have

• CISA, CRISC, CGEIT, CISSP, CISM or equivalent certifications.
• Banking, financial services or fintech experience.
• Enterprise risk governance and regulatory compliance exposure.