Manager, Governance, Risk & Compliance

Key Responsibilities

• Own and evolve MRI's GRC framework, including policies, procedures, internal controls, and risk appetite documentation, ensuring alignment with business objectives and regulatory requirements
• Lead enterprise-wide risk assessments and work cross-functionally with Engineering, Product, IT, and business units to identify, evaluate, and mitigate operational, regulatory, cybersecurity, and strategic risks
• Monitor the evolving regulatory landscape—including data privacy laws (GDPR, CCPA, state privacy regulations), financial services requirements, and industry standards and translate regulatory changes into actionable compliance strategies
• Drive SOC 2, ISO 27001, PCI-DSS and other compliance certifications, managing internal and external audit processes from planning through remediation
• Design and deliver compliance training programs to promote a culture of accountability and ethical conduct across the organization
• Develop and present executive-level risk and compliance dashboards, metrics, and reports to senior leadership, the board of directors, and key stakeholders
• Oversee third-party risk management program, including vendor security assessments, contract risk review, due diligence, and ongoing monitoring of critical suppliers
• Lead incident response and investigation efforts related to compliance breaches or policy violations
• Manage and mentor a team of GRC analysts and specialists
• Champion a compliance-forward culture by building relationships across the organization and making compliance accessible and practical for all teams
• Partner with Legal, Sales, Info Sec, and Customer Success to support customer security questionnaires, RFP responses, and due diligence requests

• Bachelor's degree in information security, business, law, or a related field; advanced degree (MBA, or Master’s in Cybersecurity/Risk Management) strongly preferred
• 8+ years of progressive experience in governance, risk, compliance, information security, or internal audit, with at least 4 years in a management or leadership capacity
• Deep expertise in regulatory frameworks and standards including NIST, SOC 2, ISO 27001, NIST CSF, PCI, SaaS or technology industry experience required
• Active professional certifications required: CISA, CRISC, CISSP, CIPP, CCEP, or equivalent; multiple certifications preferred
• Proven track record of building, scaling, and maturing GRC programs in fast-growth technology environments
• Executive presence with outstanding communication skills; ability to translate complex compliance requirements into business terms for technical and non-technical audiences
• Hands-on experience implementing and optimizing GRC platforms (e.g., Jira, Bit Site, One Trust, Archer, Logic Gate, Vanta, or Drata)
• Experience managing customer-facing compliance activities, including security questionnaires, audits, and enterprise sales support
• Strong business acumen with the ability to balance risk mitigation with business enablement

From the day we opened our doors, MRI Software has built flexible, game-changing real estate software that powers thriving communities and helps make the world a better place to live, work and play. Fulfilling that mission is only possible because of one thing: exceptional people. People like you! Our people-first approach to Prop Tech is defining a new industry standard for client experiences that, quite frankly, can’t be duplicated.

Experiences that deliver real value every day. And we know those experiences begin with our people. We believe MRI is more than just a workplace; it’s a connected community of people who truly feel they belong. Whether we’re investing in employee resource groups or providing tailored resources for each person to reach their full potential, we’re passionate about creating a work environment that makes you excited to show up every single day.

At MRI, one of our core values is to strive to amaze. From the intelligent solutions we create to the culture we cultivate, that’s our goal every day. Because that’s what industry leaders do. Whether you’re joining as a new Pride member or rejoining us after a short time away, your talent is vital to us, our…