Staff GRC Program Manager

Ripple is building a world where value moves like information does today through crypto solutions for financial institutions, businesses, governments, and developers. We are expanding our Information Security function and seeking experienced professionals to join us in building a world-class program. This critical role is based in our Luxembourg entity and is integral to strengthening our local operational presence and governance. As Ripple continues to grow its regulated activities in Europe, you will lead ICT operations initiatives in Luxembourg, acting as the bridge between global engineering teams and local regulatory execution in the digital asset space.

What you'll do

• Ensure the operational implementation and maintenance of EU and Luxembourg security frameworks, including the Digital Operational Resilience Act (DORA) and supporting technical standards.
• Lead the day-to-day management and operational oversight of outsourced ICT and security services provided by related entities within the Ripple Group or third parties, ensuring service delivery meets local regulatory standards and SLAs.
• Actively engage with global Engineering and IT teams to track and evaluate future infrastructure, application, and architectural changes, ensuring they are designed with operational resilience and regional compliance in mind.
• Coordinate the implementation of technical security controls across infrastructure and application environments, ensuring alignment with Ripple's internal controls and regulatory guidelines such as EBA, ESMA, and CSSF.
• Collaborate with global InfoSec teams to develop, maintain, and localize InfoSec Policies, Standards, and Procedures relevant to EU compliance.
• Directly access systems to pull technical evidence such as logs, system settings, and access reports to support continuous operational monitoring, incident response, and compliance efforts.
• Act as the operational subject matter expert during internal audits, customer audits, and regulatory exams by providing necessary technical evidence and demonstrating strong working knowledge of infrastructure and security processes.
• Partner with global Engineering, Compliance, Finance, Product, Legal, and Sales teams to provide operational security guidance and have direct impact on Ripple's product security and customer trust.
• Support regional customer-facing activities by assisting in responding to security due diligence questionnaires and reviewing technical aspects of customer contracts.
• Attend and participate in local and regional industry events and discussions to stay current on evolving regulations, threats, and best practices.

What you bring

• 5+ years of experience in information security infrastructure, preferably within a highly regulated industry.
• A Bachelor's Degree in a relevant discipline or equivalent professional experience.
• Demonstrable experience working within the Luxembourg financial or technology sector, with strong understanding of the local business and regulatory landscape.
• Solid working knowledge of DORA operational requirements, including resilience testing, ICT third-party management, and incident response.
• Familiarity with EU regulatory frameworks, including MiCA and related EBA and ESMA technical standards.
• Proficiency with common information technology and security frameworks such as ISO 27001, SOC2, and NIST.
• Comfort accessing systems directly to gather and analyze technical evidence, including logs, configuration data, and database queries, within a cloud-native environment.
• Ability to create clear, audience-tailored technical documentation and SOPs.
• Experience collaborating effectively with cross-functional teams of engineers, product managers, and compliance experts.
• Professional proficiency in English is required; professional proficiency in French is desirable.

Nice to have

• Familiarity with tools such as Jira, Confluence, JupiterOne, Okta, AWS, Tines, and integrated GRC platforms.
• Certifications including CISSP, CISA, AWS Certified Security, or PMP.

What we offer

• Competitive salary, bonuses, and equity.
• Competitive benefits covering physical and mental healthcare, retirement, family forming, and family support.
• Professional development budget to support learning.
• In-office collaboration flexibility, with managers and teams deciding which 10+ days a month they come in.
• Employee giving match.
• Mobile phone stipend.
• R&R days to rest and recharge.
• Generous wellness reimbursement and weekly onsite and virtual programming.
• Generous vacation policy, worked out with your manager.
• Industry-leading parental leave policies and family planning benefits.
• Catered lunches, fully-stocked kitchens with premium snacks and beverages, and regular team events.

About Ripple

Ripple builds crypto solutions for financial institutions, businesses, governments, and developers to improve the global financial system and create greater economic fairness and opportunity. The company operates across multiple regulated jurisdictions and is expanding its European presence with growing regulated activities.