[Hiring] Senior Manager of Compliance and Risk Management @Parallels Inc

Role Description

Parallels is seeking a Senior Manager of Compliance and Risk Management to support the ongoing maturity of our Governance, Risk, and Compliance program. This role is primarily focused on:

• Third-party risk management
• Responding to customer RFPs and security/vendor questionnaires
• Ensuring organization-wide compliance to common security, privacy, and AI frameworks
• Leading, creating, and managing the risk register and policy development
• Managing infrastructure and product security or privacy incidents

This is a blended role: you’ll own audit readiness and control testing for our certifications while also driving enterprise and third-party risk management and compliance. You’ll work directly with external auditors and assessors, and partner closely with Security, Legal, IT, HR, and Engineering to keep the program audit-ready year-round.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience)
• 8+ years of experience in GRC, information security compliance, IT audit, or enterprise/vendor risk management
• Hands-on experience leading or supporting audits against major frameworks (e.g., ISO 27001, NIST and SOC 2)
• Demonstrated experience managing external audits end-to-end, including auditor relationships and finding remediation
• Solid understanding of risk assessment methodologies and control frameworks (e.g., COBIT)
• Experience with risk register tools, GRC platforms and ticketing systems

Requirements

• Monitor organizational compliance with internal policies and external regulations
• Track control performance, identify gaps, and prepare regular compliance status reports for leadership
• Monitor regulatory and framework changes (e.g., EU Data Act) and assess their impact on the compliance program
• Respond to customer RFPs and security/vendor questionnaires, coordinating with subject matter experts
• Maintain a library of standard responses and supporting evidence
• Work directly with sales to attend customer calls for large enterprise customers
• Maintain the organization’s Trust Center for compliance, security, and privacy information
• Define and manage the third-party risk management program
• Ensure ongoing reviews for existing third parties
• Maintain and update the organization’s risk register
• Contribute to executive and board-level reporting on risk and compliance posture
• Oversee the development, review, and implementation of GRC policies and procedures
• Lead employee awareness and training of policy requirements
• Prepare and maintain audit-readiness materials
• Lead and coordinate audits and assessments across the compliance portfolio
• Manage external audits end-to-end
• Design, test, and monitor internal controls
• Lead all infrastructure and product security or privacy incidents
• Define and own the company-wide incident process
• Implement systems for efficient incident handling
• Manage, hire, and train GRC analysts

Benefits

• Fully remote workspace
• Flexible hours
• Supportive and inclusive work environment