Employee Applicant Privacy Notice
Who we are:
Shape a brighter financial future with us.
Together with our members, we’re changing the way people think about and interact with personal finance.
We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
The role:
The Senior Manager, GRC Governance & Enablement leads the governance and enablement capabilities that help ensure GRC and Independent Risk Management changes are controlled, tested, secure, release-ready, and successfully adopted.
This role sits within the Second Line Of Defense (2LOD) and is responsible for key disciplines including organizational change management, QA and testing governance, security and access governance, release readiness, adoption, training, communications, governance evidence, and operating standards. The role partners closely with the GRC Business Systems Director, Business Analyst, business process owners, Functional Approvers, Design Authority representatives, technology teams, and implementation partners to support both transformation initiatives and ongoing BAU sustainment.
The position also plays an important role in shaping the future-state GRC operating model by establishing scalable governance practices that support growth, regulatory expectations, user experience, data accuracy, and operational efficiency.
What you’ll do:
- Lead the GRC change management and enablement framework, including stakeholder readiness, communications, training, adoption, reinforcement, and change governance.
- Establish and maintain QA and testing standards, including test planning, UAT governance, defect management, traceability, regression testing, sign-off, and testing evidence.
- Oversee security and access governance for GRC capabilities, including roles, groups, access approvals, periodic reviews, reconciliations, and supporting control evidence.
- Define and govern release-readiness standards for implementations, enhancements, and material production changes.
- Ensure appropriate readiness criteria are met across testing, security, communications, training, business approvals, support preparation, and BAU transition before release.
- Develop and maintain governance standards, required evidence, decision records, approval artifacts, and readiness documentation.
- Identify gaps in governance, control execution, documentation, or readiness and coordinate remediation with the appropriate business and technology teams.
- Lead development of adoption, training, and communications strategies tailored to impacted stakeholder groups.
- Monitor adoption and user experience and identify opportunities to improve usability, effectiveness, and change outcomes.
- Support development of the future-state GRC operating model, governance framework, and scalable delivery practices.
- Identify opportunities to standardize, automate, simplify, and improve GRC lifecycle and governance processes.
- Partner with technology teams and implementation partners to ensure new capabilities are designed with sustainment, controls, readiness, and BAU ownership in mind.
- Collaborate closely with the Business Analyst to align governance, change, testing, security, and readiness activities with day-to-day delivery and BAU priorities.
- Balance strategic future-state planning with near-term delivery needs, ensuring BAU enhancements, testing, release readiness, governance, and change activities remain coordinated and appropriately prioritized.
- Support executive and leadership reporting related to readiness, governance, adoption, risk, and delivery quality.
What you’ll need:
- Bachelor’s degree or equivalent relevant experience
- Experience with ServiceNow IRM/GRC or comparable enterprise GRC platforms.
- 8+ years of experience across one or more of the following areas: GRC, risk management, business systems, organizational change management, technology delivery, QA/testing, security governance, or transformation
- Demonstrated experience leading cross-functional initiatives involving business, technology, risk, compliance, and third-party partners
- Experience developing and implementing governance, readiness, testing, change, or operating-model standards
- Strong understanding of regulated environments and the importance of control evidence, approvals, traceability, data quality, and governance
- Strong stakeholder management and executive communication skills
- Demonstrated ability to manage multiple priorities across both strategic and operational work
- Experience leading or managing people, including coaching, prioritization, and performance support
- A collaborative team player with a positive attitude
- Comfortable presenting ideas and solutions to stakeholders at all levels of the organization
- Change leadership — anticipates resistance, adoption risks, and operational impacts and adjusts the approach accordingly
- Continuous-improvement mindset — looks for opportunities to simplify, automate, standardize, and improve both the solution and the operating model
Nice to have:
- Familiarity with SoFi’s existing risk, compliance, and audit processes is a strong advantage
- Familiarity with Agile delivery, backlog management, sprint refinement, Scrum ceremonies, and hybrid Agile/Waterfall environments.
- Demonstrated knowledge of GRC Intelligence Dashboards and Management Reporting
Skills Required
- Bachelor's degree or equivalent relevant experience
- Experience with ServiceNow IRM/GRC or comparable enterprise GRC platforms
- 8+ years of experience in GRC, risk management, business systems, organizational change management, technology delivery, QA/testing, security governance, or transformation
- Experience leading cross-functional initiatives involving business, technology, risk, compliance, and third-party partners
- Experience developing and implementing governance, readiness, testing, change, or operating-model standards
- Strong understanding of regulated environments, control evidence, approvals, traceability, data quality, and governance
- Strong stakeholder management and executive communication skills
- Ability to manage multiple strategic and operational priorities
- Experience leading or managing people, including coaching, prioritization, and performance support
- Ability to present ideas and solutions to stakeholders at all organizational levels
- Change leadership experience addressing resistance, adoption risks, and operational impacts
- Continuous-improvement mindset focused on simplification, automation, standardization, and process improvement
- Familiarity with SoFi's risk, compliance, and audit processes
- Familiarity with Agile delivery, backlog management, sprint refinement, Scrum ceremonies, and hybrid Agile/Waterfall environments
- Knowledge of GRC Intelligence Dashboards and Management Reporting
What the Team is Saying
What We Do
SoFi wasn’t built to be a bank. Or a technology company. We were built for one mission: help people achieve financial independence so they can realize their ambitions. Redefining an entire industry isn’t easy work—and it’s not for the faint of heart. It takes a certain kind of team. People with diverse perspectives and expertise, united by a common sense of purpose. People willing to challenge assumptions but always do the right thing. People proving that innovation and responsibility don’t have to compete, but can come together to create something truly unconventional in the world. For the last eight years, we’ve been charting this new path forward. We call it The SoFi Way. At SoFi, we don’t just talk about culture: we live it. The SoFi Way is how we show up every day, how we make decisions, and how we build for our members, clients, and each other.
Why Work With Us
Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation Fintech company using innovative, mobile-first technology to help our members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront.
Gallery
SoFi Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
For the majority of our workforce who work on a hybrid schedule, the in-office requirement is a handful of days per month!
