Senior GRC Program Manager, Ripple Treasury

As a Senior GRC Program Manager in Ripple Treasury, you support the customer security assurance program, helping Ripple Treasury customers and prospects understand and gain confidence in our security posture. This role sits at the intersection of security, sales, and compliance, backing up the RFP team on security questionnaires, meeting directly with prospective customers, maintaining security-related sales documentation, and supporting the management of customer-focused DORA audits.

What you'll do

• Serve as backup to the RFP team, completing and reviewing security questionnaires such as SIG, CAIQ, and custom customer questionnaires accurately and on deadline, and maintaining a repository of reusable, approved responses.
• Meet with prospective and existing customers to walk through the Ripple security program, respond to security and due diligence questions, and support security-related aspects of deals and renewals.
• Create and maintain security-related sales collateral, security overviews, trust center content, certification and attestation summaries, control mappings, and architecture and data-flow references, ensuring materials stay current and accurately reflect the security program.
• Assist in managing customer-initiated DORA (Digital Operational Resilience Act) audits, including coordinating audit logistics, gathering and organizing evidence, and serving as a liaison between customers and internal control owners.
• Partner with control owners across Information Security, Engineering, and IT to validate questionnaire responses and gather supporting evidence when needed.
• Work closely with Information Security, Legal, Sales, and Customer Success to ensure consistent, accurate, and contractually aligned representation of Ripple Treasury's security and compliance posture.
• Identify recurring customer questions and contribute to standardized responses, FAQs, and enablement materials to reduce manual effort and improve turnaround time.
• Recognize customer requests that may introduce security, compliance, or contractual risk, and escalate appropriately.

What you bring

• 5+ years in GRC, customer security assurance, or a related security function, with hands-on experience responding to customer security questionnaires and due diligence requests.
• Solid grounding in information security frameworks including SOC 2, ISO 27001, NIST, and SWIFT, with proven understanding of core security domains such as access control, encryption, vulnerability management, and vendor risk.
• Familiarity with regulatory frameworks affecting financial services customers, with direct exposure to DORA being a strong plus.
• Strong written and verbal communication skills, with the ability to translate technical security concepts into clear, business-friendly language for non-technical audiences.
• Ability to manage multiple concurrent customer engagements and deadlines with strong organizational discipline.
• Background working directly with financial services or FinTech customers, with familiarity with data protection and privacy frameworks including GDPR, CCPA, and DORA.

Nice to have

• Experience with trust center or security assurance platforms such as SafeBase or Vanta.
• Experience with questionnaire automation tooling and GRC platforms such as Drata or LogiGate.
• Relevant certifications such as CISA, CISM, CISSP, or Security+.

What we offer

• Competitive salary, bonuses, and equity
• Competitive benefits covering physical and mental healthcare, retirement, family forming, and family support
• Employee giving match
• Mobile phone stipend
• R&R days to rest and recharge
• Generous wellness reimbursement and weekly onsite and virtual programming
• Generous vacation policy that you work out with your manager
• Industry-leading parental leave policies and family planning benefits
• Catered lunches, fully-stocked kitchens, and regular team events
• Professional development budget to support learning
• Flexible in-office collaboration, with managers and teams deciding which 10+ days a month they come in
• Bi-weekly all-company meetings with leadership
• Team offsites and bonding activities

About Ripple

Ripple is building a world where value moves like information does today through crypto solutions for financial institutions, businesses, governments, and developers. The company improves the global financial system and creates greater economic fairness and opportunity through on-chain infrastructure.