Senior Manager, GRC Governance & Enablement

Employee Applicant Privacy Notice

Who we are:

Shape a brighter financial future with us.

Together with our members, we’re changing the way people think about and interact with personal finance.

We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

The role:

The Senior Manager, GRC Governance & Enablement leads the governance and enablement capabilities that help ensure GRC and Independent Risk Management changes are controlled, tested, secure, release-ready, and successfully adopted.

This role sits within the Second Line Of Defense (2LOD) and is responsible for key disciplines including organizational change management, QA and testing governance, security and access governance, release readiness, adoption, training, communications, governance evidence, and operating standards. The role partners closely with the GRC Business Systems Director, Business Analyst, business process owners, Functional Approvers, Design Authority representatives, technology teams, and implementation partners to support both transformation initiatives and ongoing BAU sustainment.

The position also plays an important role in shaping the future-state GRC operating model by establishing scalable governance practices that support growth, regulatory expectations, user experience, data accuracy, and operational efficiency.

What you’ll do:

• Lead the GRC change management and enablement framework, including stakeholder readiness, communications, training, adoption, reinforcement, and change governance.
• Establish and maintain QA and testing standards, including test planning, UAT governance, defect management, traceability, regression testing, sign-off, and testing evidence.
• Oversee security and access governance for GRC capabilities, including roles, groups, access approvals, periodic reviews, reconciliations, and supporting control evidence.
• Define and govern release-readiness standards for implementations, enhancements, and material production changes.
• Ensure appropriate readiness criteria are met across testing, security, communications, training, business approvals, support preparation, and BAU transition before release.
• Develop and maintain governance standards, required evidence, decision records, approval artifacts, and readiness documentation.
• Identify gaps in governance, control execution, documentation, or readiness and coordinate remediation with the appropriate business and technology teams.
• Lead development of adoption, training, and communications strategies tailored to impacted stakeholder groups.
• Monitor adoption and user experience and identify opportunities to improve usability, effectiveness, and change outcomes.
• Support development of the future-state GRC operating model, governance framework, and scalable delivery practices.
• Identify opportunities to standardize, automate, simplify, and improve GRC lifecycle and governance processes.
• Partner with technology teams and implementation partners to ensure new capabilities are designed with sustainment, controls, readiness, and BAU ownership in mind.
• Collaborate closely with the Business Analyst to align governance, change, testing, security, and readiness activities with day-to-day delivery and BAU priorities.
• Balance strategic future-state planning with near-term delivery needs, ensuring BAU enhancements, testing, release readiness, governance, and change activities remain coordinated and appropriately prioritized.
• Support executive and leadership reporting related to readiness, governance, adoption, risk, and delivery quality.

What you’ll need:

• Bachelor’s degree or equivalent relevant experience
• Experience with ServiceNow IRM/GRC or comparable enterprise GRC platforms.
• 8+ years of experience across one or more of the following areas: GRC, risk management, business systems, organizational change management, technology delivery, QA/testing, security governance, or transformation
• Demonstrated experience leading cross-functional initiatives involving business, technology, risk, compliance, and third-party partners
• Experience developing and implementing governance, readiness, testing, change, or operating-model standards
• Strong understanding of regulated environments and the importance of control evidence, approvals, traceability, data quality, and governance
• Strong stakeholder management and executive communication skills
• Demonstrated ability to manage multiple priorities across both strategic and operational work
• Experience leading or managing people, including coaching, prioritization, and performance support
• A collaborative team player with a positive attitude
• Comfortable presenting ideas and solutions to stakeholders at all levels of the organization
• Change leadership — anticipates resistance, adoption risks, and operational impacts and adjusts the approach accordingly
• Continuous-improvement mindset — looks for opportunities to simplify, automate, standardize, and improve both the solution and the operating model

Nice to have:

• Familiarity with SoFi’s existing risk, compliance, and audit processes is a strong advantage
• Familiarity with Agile delivery, backlog management, sprint refinement, Scrum ceremonies, and hybrid Agile/Waterfall environments.
• Demonstrated knowledge of GRC Intelligence Dashboards and Management Reporting

Compensation and Benefits

The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location.

To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page!

SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.

The Company hires the best qualified candidate for the job, without regard to protected characteristics.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

New York applicants: Notice of Employee Rights

SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email accommodations@sofi.com.

We are unable to accommodate remote work from Hawaii, Alaska or Puerto Rico at this time.

Internal Employees

If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.