Skip to main content
Senior GRC Manager – AI Governance, Risk & Compliance — Capital One
Capital One logo
Governance, Risk & Compliance (GRC) · Verified Opening #91

Senior GRC Manager – AI Governance, Risk & Compliance

business Capital One location_on Remote apartment Hybrid Full Time

Compensation

$180K – 220K/yr

bolt Apply for this role
calendar_month

Published Date

14 hours ago

apartment

Work Arrangement

Hybrid • Remote

group_add

Open Positions

2 openings

workspace_premium

Experience Level

Senior-Level

overview Role Overview

About the opportunity

Lead enterprise-wide Governance, Risk, and Compliance initiatives with a strategic focus on AI governance, cybersecurity risk management, regulatory compliance, and responsible AI adoption.

Deloitte is seeking an experienced Senior GRC Manager specializing in AI Governance, Enterprise Risk Management, and Cybersecurity Compliance. This leadership position will drive enterprise governance strategies, oversee complex risk assessments, and establish robust compliance programs for AI-powered technologies. The successful candidate will partner with executive leadership, legal teams, cybersecurity architects, technology stakeholders, and external auditors. Responsibilities include developing AI governance frameworks, overseeing enterprise control environments, managing regulatory compliance initiatives, and implementing AI-powered GRC automation. The ideal candidate brings extensive knowledge of NIST CSF, NIST AI RMF, ISO 27001, ISO 42001, SOC 2, GDPR, and emerging AI regulations. This role offers executive-level exposure and the opportunity to shape responsible AI adoption across global business operations.
task Core Responsibilities

What you will do

  • check_circle Lead enterprise-wide GRC strategy, including cybersecurity governance, technology risk management, regulatory compliance, and AI governance programs.
  • check_circle Design, implement, and oversee enterprise AI risk management frameworks aligned with NIST AI RMF, ISO 42001, responsible AI principles, and applicable regulatory requirements.
  • check_circle Direct enterprise risk assessments, control evaluations, internal audits, and remediation programs across cloud, cybersecurity, data, and AI environments.
  • check_circle Establish and maintain compliance programs aligned with NIST CSF, ISO 27001, SOC 2, GDPR, and other applicable regulatory standards.
  • check_circle Oversee AI-powered GRC automation, continuous control monitoring, risk analytics, and executive compliance reporting.
  • check_circle Advise C-suite executives, technology leadership, legal teams, and business stakeholders on regulatory developments, enterprise risk exposure, and compliance strategy.
  • check_circle Lead and mentor multidisciplinary GRC teams while managing external auditors, regulatory engagements, and third-party risk management programs.
verified_user Candidate Profile

What we are looking for

  • arrow_circle_right Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Business Administration, or a related field; master's degree preferred.
  • arrow_circle_right 8+ years of professional experience in Governance, Risk, and Compliance, cybersecurity risk management, IT audit, or enterprise technology risk, including leadership experience.
  • arrow_circle_right Demonstrated expertise in NIST CSF, NIST AI RMF, ISO 27001, ISO 42001, SOC 2, GDPR, and enterprise compliance frameworks.
  • arrow_circle_right Proven experience leading enterprise risk assessments, regulatory audits, security control programs, AI governance initiatives, and compliance transformation projects.
  • arrow_circle_right Hands-on experience with enterprise GRC platforms such as ServiceNow GRC, Archer, or MetricStream, along with AI-driven risk monitoring and compliance automation.
  • arrow_circle_right Excellent executive communication, strategic planning, stakeholder management, and team leadership capabilities.
code_blocks Technologies & Competencies

Skills & Tech Stack

Enterprise GRC Strategy AI Governance Enterprise Risk Management NIST AI RMF ISO 27001 / ISO 42001 SOC 2 Compliance Cybersecurity Risk Management GRC Automation
handshake Direct Referral Network

Why candidate applications stand out

verified

Verified Technical Credentials

Applications include direct proof-of-work repositories and instructor verification endorsements.

person_check

Fast-Track Hiring Visibility

Direct internal referral channels through enterprise partners bypass automated resume discard filters.

work Planning your next career move? Get professional course guidance from TutorAI.

cookie

We value your privacy

We use cookies to run the site and, with your consent, to understand how it's used so we can improve it. See our Cookie Policy and Privacy Policy.