Manager, Governance, Risk & Compliance

About the Role

The Manager, Governance, Risk, and Compliance leads Accela's security governance, risk, compliance, audit, and customer trust programs. This role owns security policies, standards, risk management processes, control evidence, audit readiness, and third-party risk management.

The Manager, GRC partners with Security, Legal, IT, Engineering, Product, Finance, People, and customer-facing teams to ensure Accela meets regulatory, contractual, audit, and customer trust obligations.

This role is the primary owner for compliance programs and audit readiness across SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST CSF, NIST 800-53, CCPA/GDPR, and other customer or regulatory requirements.

Key Responsibilities

• Lead the governance, risk, and compliance function across security policies, standards, risk management, audits, third-party risk, and control operations
• Develop, maintain, and operationalize global security policies, standards, procedures, control documentation, and exception processes
• Own audit readiness and ongoing compliance programs across SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST CSF, NIST 800-53, CCPA/GDPR, and regulatory requirements
• Lead GovRAMP and PCI DSS readiness, including control mapping, evidence collection, remediation tracking, and audit support
• Coordinate audit evidence collection, control testing, remediation tracking, auditor communication, and management responses
• Maintain the security risk register, including identification, assessment, ownership, remediation, acceptance, exception tracking, and executive reporting
• Partner with control owners across Security, IT, Engineering, Legal, HR, Finance, Product, and Operations to ensure control effectiveness
• Manage third-party and supply chain risk management, including vendor security reviews, due diligence, risk assessments, and remediation tracking
• Support customer security reviews, questionnaires, trust center content, and customer-facing compliance responses
• Develop metrics and dashboards for audit status, control health, risk posture, vendor risk, and compliance readiness
• Support incident response and privacy incident processes to ensure regulatory, contractual, and customer notification obligations are tracked
• Partner with the CISO to communicate security posture, compliance progress, and key risks to executives, customers, auditors, and regulators
• Drive continuous improvement of the GRC operating model through automation, evidence reuse, control rationalization, and policy lifecycle management

Required Qualifications

• 6+ years of experience in security governance, risk management, compliance, audit, or related roles

Salary Information: This position has an estimated salary range of $80,000–$130,000 USD annually. This is an editorial market estimate based on comparable roles and is not employer-provided compensation. Actual salary may vary significantly based on experience level, location, qualifications, and market conditions.