Sobre este puesto de Senior Manager, GRC Governance & Enablement en SoFi
Employee Applicant Privacy Notice
Who we are:
Shape a brighter financial future with us.
Together with our members, we’re changing the way people think about and interact with personal finance.
We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
The role:
The Senior Manager, GRC Governance & Enablement leads the governance and enablement capabilities that help ensure GRC and Independent Risk Management changes are controlled, tested, secure, release-ready, and successfully adopted.
This role sits within the Second Line Of Defense (2LOD) and is responsible for key disciplines including organizational change management, QA and testing governance, security and access governance, release readiness, adoption, training, communications, governance evidence, and operating standards. The role partners closely with the GRC Business Systems Director, Business Analyst, business process owners, Functional Approvers, Design Authority representatives, technology teams, and implementation partners to support both transformation initiatives and ongoing BAU sustainment.
The position also plays an important role in shaping the future-state GRC operating model by establishing scalable governance practices that support growth, regulatory expectations, user experience, data accuracy, and operational efficiency.
What you’ll do:
- Lead the GRC change management and enablement framework, including stakeholder readiness, communications, training, adoption, reinforcement, and change governance.
- Establish and maintain QA and testing standards, including test planning, UAT governance, defect management, traceability, regression testing, sign-off, and testing evidence.
- Oversee security and access governance for GRC capabilities, including roles, groups, access approvals, periodic reviews, reconciliations, and supporting control evidence.
- Define and govern release-readiness standards for implementations, enhancements, and material production changes.
- Ensure appropriate readiness criteria are met across testing, security, communications, training, business approvals, support preparation, and BAU transition before release.
- Develop and maintain governance standards, required evidence, decision records, approval artifacts, and readiness documentation.
- Identify gaps in governance, control execution, documentation, or readiness and coordinate remediation with the appropriate business and technology teams.
- Lead development of adoption, training, and communications strategies tailored to impacted stakeholder groups.
- Monitor adoption and user experience and identify opportunities to improve usability, effectiveness, and change outcomes.
- Support development of the future-state GRC operating model, governance framework, and scalable delivery practices.
- Identify opportunities to standardize, automate, simplify, and improve GRC lifecycle and governance processes.
- Partner with technology teams and implementation partners to ensure new capabilities are designed with sustainment, controls, readiness, and BAU ownership in mind.
- Collaborate closely with the Business Analyst to align governance, change, testing, security, and readiness activities with day-to-day delivery and BAU priorities.
- Balance strategic future-state planning with near-term delivery needs, ensuring BAU enhancements, testing, release readiness, governance, and change activities remain coordinated and appropriately prioritized.
- Support executive and leadership reporting related to readiness, governance, adoption, risk, and delivery quality.
What you’ll need:
- Bachelor’s degree or equivalent relevant experience
- Experience with ServiceNow IRM/GRC or comparable enterprise GRC platforms.
- 8+ years of experience across one or more of the following areas: GRC, risk management, business systems, organizational change management, technology delivery, QA/testing, security governance, or transformation
- Demonstrated experience leading cross-functional initiatives involving business, technology, risk, compliance, and third-party partners
- Experience developing and implementing governance, readiness, testing, change, or operating-model standards
- Strong understanding of regulated environments and the importance of control evidence, approvals, traceability, data quality, and governance
- Strong stakeholder management and executive communication skills
- Demonstrated ability to manage multiple priorities across both strategic and operational work
- Experience leading or managing people, including coaching, prioritization, and performance support
- A collaborative team player with a positive attitude
- Comfortable presenting ideas and solutions to stakeholders at all levels of the organization
- Change leadership — anticipates resistance, adoption risks, and operational impacts and adjusts the approach accordingly
- Continuous-improvement mindset — looks for opportunities to simplify, automate, standardize, and improve both the solution and the operating model
Nice to have:
- Familiarity with SoFi’s existing risk, compliance, and audit processes is a strong advantage
- Familiarity with Agile delivery, backlog management, sprint refinement, Scrum ceremonies, and hybrid Agile/Waterfall environments.
- Demonstrated knowledge of GRC Intelligence Dashboards and Management Reporting
