Manager, GRC

As Manager, GRC at Coinbase, you lead second line of defense advisory coverage across critical technology and security domains within our Technology Risk & Controls team. You both manage a team and directly own advisory coverage for domains that may include disaster recovery and resiliency, SDLC, artificial intelligence, identity and access management, and supply chain, building trusted partnerships that ensure Coinbase addresses its most critical risks in its most critical functions.

What you'll do

• Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business.
• Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed.
• Review and challenge the design of new and existing risks and their corresponding controls to ensure mitigations are scalable, effective, and aligned to business, risk, and regulatory expectations.
• Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations into actionable improvements that strengthen the technology control environment.
• Intake, triage, and calculate inherent and residual risk with subject matter experts and risk owners, facilitating risk treatment decisions and validating execution of mitigation plans.
• Enable leadership decision-making by communicating quantitative and qualitative risk tradeoffs and connecting risks, controls, policies, incidents, and findings into clear narratives that support prioritization and reporting.
• Build, grow, and coach a team of technology and security analysts and senior analysts, fostering a culture of agility, innovation, and continuous performance feedback.

What you bring

• 8+ years in technology risk, IT controls, IT audit, cybersecurity risk, or compliance, with hands-on experience delivering full-stack GRC services including risk management, control design, continuous monitoring, and governance documentation.
• Deep understanding of technical design and governance principles across one or more domains such as infrastructure resiliency, SDLC, change management, or incident response, with demonstrated ability to challenge status quo and drive improvement.
• Hands-on experience evaluating risks and control design, identifying weaknesses, and partnering with stakeholders to improve risk outcomes and control maturity.
• Proven track record managing and mentoring analysts, growing their capabilities and careers while holding teams accountable to deliverables and timelines.
• Track record of influencing cross-functional stakeholders, navigating ambiguity, and translating complex risk and compliance concepts into clear functional requirements for both technical and non-technical audiences.
• Ability to utilise generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

What we offer

• Annual base salary of $193,970-$228,200 USD, varying by location
• Equity and bonus eligibility
• Benefits including medical, dental, vision, and 401(k)
• Remote-first work with quarterly in-person working sessions

About Coinbase

Coinbase is on a mission to increase economic freedom. We are a remote-first company with offices worldwide, bringing together people who refuse to settle for "good enough" to build the future of finance.