Manager, Governance, Risk & Compliance

Accela

Manager responsible for governance, risk, and compliance programs at Accela, ensuring regulatory standards are met and auditing processes are followed.

Posted 7/14/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $150,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in governance, risk, and compliance (GRC) functions, with a strong focus on security policies, audit readiness, and third-party risk management. Proficient in managing compliance programs across various frameworks while effectively communicating with stakeholders and executives.

Highest-signal resume keywords

Governance, Risk, And Compliance (GRC)Audit ReadinessThird-Party Risk ManagementSecurity Policy ManagementCompliance Program Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security GovernanceRisk ManagementCompliance AuditingControl TestingEvidence CollectionRisk AssessmentPolicy ManagementControl MappingRemediation TrackingMetrics Development

Soft Skills

Project ManagementWritten CommunicationVerbal Communication

Industry Keywords

SOC 2ISO 27001GovRAMPPCI DSSHIPAANIST CSFNIST 800-53CCPAGDPRVendor Security Review

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead the governance, risk, and compliance function across security policies, standards, risk management, audits, third-party risk, and control operations.
Develop, maintain, and operationalize global security policies, standards, procedures, control documentation, and exception processes.
Own audit readiness and ongoing compliance programs across frameworks such as SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST CSF, NIST 800-53, CCPA/GDPR, and other customer or regulatory requirements.
Lead GovRAMP and PCI DSS readiness, including control mapping, evidence collection, remediation tracking, stakeholder coordination, audit preparation, and audit support.
Coordinate audit evidence collection, control testing, remediation tracking, auditor communication, and management responses.
Maintain the security risk register, including identification, assessment, ownership, remediation, acceptance, exception tracking, and executive reporting of security risks.
Partner with control owners across Security, IT, Engineering, Legal, HR, Finance, Product, and Operations to ensure control effectiveness and accountability.
Manage third-party and supply chain risk management, including vendor security reviews, due diligence, risk assessments, contract security input, and remediation tracking.
Support customer security reviews, questionnaires, trust center content, security documentation, and customer-facing compliance responses.
Develop metrics and dashboards for audit status, control health, risk posture, vendor risk, policy exceptions, compliance readiness, and remediation progress.
Support incident response and privacy incident processes by ensuring regulatory, contractual, audit, and customer notification obligations are understood and tracked.
Partner with the CISO to communicate security posture, compliance progress, key risks, control gaps, and trade-offs to executives, customers, auditors, and regulators.
Drive continuous improvement of the GRC operating model, including automation, evidence reuse, control rationalization, risk prioritization, and policy lifecycle management.

Requirements

What you’ll need

6+ years of experience in security governance, risk management, compliance, audit, third-party risk, or related cybersecurity roles.
Experience managing or supporting audits and compliance programs for SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST 800-53, or similar frameworks.
Strong understanding of security controls, policy management, risk assessment, control testing, evidence collection, and audit readiness practices.
Experience working with auditors, customers, internal stakeholders, and executive leadership.
Experience managing third-party risk or vendor security review programs.
Ability to translate complex compliance obligations into practical business and technical requirements.
Strong project management skills with the ability to manage multiple audits, risks, remediation efforts, and stakeholder workstreams simultaneously.
Excellent written and verbal communication skills.

Benefits

Comp & perks

flexible time off
comprehensive medical, dental, and vision plans
family planning benefits
401(k) retirement savings plan with company match
health savings account with company contributions
flexible spending account
life, accident, and disability coverage
business travel insurance
employee assistance programs
other well-being benefits