GRC (Governance Risk & Compliance) Manager

About the role

Axipro is seeking an experienced GRC Manager to lead complex governance, risk, and compliance projects for international clients. This senior position requires strategic vision, deep subject‑matter expertise, and end‑to‑end project ownership.

Key responsibilities

• Lead, plan and deliver multiple concurrent GRC certification projects (e.g., SOC 2, ISO 27001) while managing scope, resources and budgets.
• Develop and maintain client GRC risk registers and internal control frameworks aligned with standards such as ISO and NIST.
• Design and operate continuous compliance programs on the Drata platform and act as primary lead during external audits.
• Mentor junior team members, delegate tasks and provide strategic direction.
• Serve as liaison between Axipro technical teams, auditors and client executives, presenting risk status and compliance health.

Required profile

• Minimum 5+ years of progressive GRC experience, including at least 2 years in a management or lead consulting role.
• Proven success delivering end‑to‑end certification projects for at least two major frameworks (SOC 2, ISO 27001, HIPAA, etc.).
• Strong communication, presentation and negotiation skills for executive‑level client discussions.

Required skills

• Expert‑level familiarity with GRC automation platforms, especially Drata.
• Proficiency with project management tools such as Notion and Microsoft Teams.
• Knowledge of compliance frameworks: SOC 2, ISO 27001, ISO 42001, ISO 9001, HIPAA, CMMC.
• Professional certifications (highly desirable): CISA, CISM, CISSP, PMP.

What we offer

• Fully remote, full‑time position with flexible Friday schedule and weekends off.
• 21 days paid time off per year plus an end‑of‑year team break.
• Wellness app access for physical and mental health support.
• Global exposure working with clients across EMEA, APAC and the US.