Senior GRC Program Manager

Bumble Inc. • Austin, TX

110d • $185,000 - $210,000

About The Position

At Bumble, we’re building secure, AI-driven systems that empower connection and trust globally. Security and privacy are at the heart of that mission. We’re looking for a Senior Security GRC Program Manager to lead our PCI, SOX, ITGC, and GDPR programs — driving audit excellence, automation maturity, and cross-functional compliance alignment across Bumble’s products and infrastructure. This role is ideal for someone who thrives in fast-moving environments and knows how to transform compliance from a checkpoint into a scalable, automated enabler of trust.

Requirements

• 6+ years of experience in Security GRC, audit, or compliance within a cloud-native or technology-driven environment.
• Proven ownership of PCI, SOX, ITGC, and GDPR compliance programs — from planning through audit closure.
• Demonstrated success driving measurable improvements in audit efficiency, control maturity, or automation adoption.
• Strong working knowledge of cloud architectures (AWS, GCP) and common ITGC control areas — including access management, change management, and incident response.
• Experience integrating GRC tools with engineering systems (e.g., CI/CD pipelines, Jira, Slack, or identity platforms like Okta).
• Ability to design or refine control automation workflows and collaborate with engineers on technical control implementation.
• Practical understanding of data flow mapping and system-of-record validation to support GDPR evidence and privacy controls.
• Track record of leading multi-stakeholder audits (Finance, Legal, Engineering, Privacy) and aligning diverse teams on deadlines and deliverables.
• Skilled at presenting complex audit or risk topics to executive leadership using concise, data-driven insights.
• Capable of drafting clear, audit-ready documentation and control narratives without excessive bureaucracy.

Nice To Haves

• Hands-on experience automating evidence collection or audit testing workflows.
• Familiarity with data protection impact assessments (DPIAs) and GDPR privacy operations.
• Experience building or maintaining risk registers, executive dashboards, or compliance OKRs/KPIs.
• Certifications such as CISA, CISM, CISSP, CRISC, or ISO Lead Auditor.
• Background in payments, fintech, or regulated SaaS environments.

Responsibilities

• Lead end-to-end management of PCI, SOX, ITGC, and GDPR frameworks — from annual audit planning through evidence collection, remediation, and executive reporting.
• Partner with Security Engineering, Finance IT, and Product teams to automate evidence workflows, control attestations, and testing pipelines via tools such as Drata, Vanta, or ServiceNow GRC.
• Co-own SOX ITGC compliance with Finance IT, directly manage external audit partners, and maintain strong control hygiene across identity, change management, and infrastructure layers.
• Maintain Bumble’s PCI program scope, manage annual assessments, and coordinate with payments and infrastructure teams to ensure ongoing adherence and minimal audit fatigue.
• Partner with Legal, Privacy, and Data Engineering to operationalize GDPR requirements, ensuring data protection principles and privacy-by-design controls are consistently validated.
• Build dashboards and KPI reports that provide visibility into audit readiness, control performance, and remediation progress for executive stakeholders.

Benefits

• $10,000 lifetime benefit opportunity for reproductive journey support.
• Family leave to support you and your loved ones when needed.
• 26 weeks paid parental leave for primary and secondary caregivers.
• Unlimited paid time off.
• Company-wide week off once a year.
• Focus Fridays with no meetings or deadlines.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Number of Employees: 501-1,000 employees