Manager, Governance, Risk & Compliance

MRI Software ’s Legal & Compliance team plays a critical role in protecting our organization and stakeholders through robust governance frameworks and proactive risk management. We are seeking an experienced Manager of Governance, Risk & Compliance (GRC) to lead and strengthen our compliance framework, risk management processes, and governance structures. You will serve as a trusted partner to internal teams across the organization, driving enterprise-wide compliance initiatives and ensuring MRI meets its regulatory obligations. In this role, you’ll report directly to the SVP of Legal and Compliance and have a seat at the table on strategic decisions affecting the business. This role offers meaningful impact: you’ll shape the GRC program strategy, mentor a team of analysts and specialists, and help build the infrastructure that supports MRI’s continued growth and success. Key Responsibilities - Own and evolve MRI's GRC framework, including policies, procedures, internal controls, and risk appetite documentation, ensuring alignment with business objectives and regulatory requirements - Lead enterprise-wide risk assessments and work cross-functionally with Engineering, Product, IT, and business units to identify, evaluate, and mitigate operational, regulatory, cybersecurity, and strategic risks - Monitor the evolving regulatory landscape—including data privacy laws (GDPR, CCPA, state privacy regulations), financial services requirements, and industry standards—and translate regulatory changes into actionable compliance strategies - Drive SOC 2, ISO 27001, PCI-DSS and other compliance certifications, managing internal and external audit processes from planning through remediation - Design and deliver compliance training programs to promote a culture of accountability and ethical conduct across the organization - Develop and present executive-level risk and compliance dashboards, metrics, and reports to senior leadership, the board of directors, and key stakeholders - Oversee third-party risk management program, including vendor security assessments, contract risk review, due diligence, and ongoing monitoring of critical suppliers - Lead incident response and investigation efforts related to compliance breaches or policy violations - Manage and mentor a team of GRC analysts and specialists - Champion a compliance-forward culture by building relationships across the organization and making compliance accessible and practical for all teams - Partner with Legal, Sales, InfoSec, and Customer Success to support customer security questionnaires, RFP responses, and due diligence requests Qualifications - Bachelor's degree in information security, business, law, or a related field; advanced degree (MBA, or Master’s in Cybersecurity/Risk Management) strongly preferred - 8+ years of progressive experience in governance, risk, compliance, information security, or internal audit, with at least 4 years in a management or leadership capacity - Deep expertise in regulatory frameworks and standards including NIST, SOC 2, ISO 27001, NIST CSF, PCI, SaaS or technology industry experience required - Active professional certifications required: CISA, CRISC, CISSP, CIPP, CCEP, or equivalent; multiple certifications preferred - Proven track record of building, scaling, and maturing GRC programs in fast-growth technology environments - Executive presence with outstanding communication skills; ability to translate complex compliance requirements into business terms for technical and non-technical audiences - Hands-on experience implementing and optimizing GRC platforms (e.g., Jira, BitSite,OneTrust, Archer, LogicGate, Vanta, or Drata) - Experience managing customer-facing compliance activities, including security questionnaires, audits, and enterprise sales support - Strong business acumen with the ability to balance risk mitigation with business enablement About Us From the day we opened