Sr Project Manager, GRC (Governance Risk and Compliance)

Who we are:
Through a partnership-based approach, Coterie helps insurance professionals unlock untapped revenue in the small commercial space. With an innovative quoting platform that delivers accurate pricing and bindable quotes in less than one minute, Coterie makes small business insurance effortless.  
We are on a mission to build and foster a world-class team to bring speed, simplicity, and service to commercial insurance. We value integrity, humility, passion, and intelligence. If you want to push yourself and reshape a $200B+ market, we’re excited to talk to you!

Position Summary:

Coterie's GRC team is hiring a Senior Project Manager to own remediation projects tied to SOC 2, ITGC, and regulatory compliance requirements, including emerging regulations in privacy, AI governance, and security. The role also supports recurring compliance programs, such as the annual risk assessment cycle, from a scheduling and tracking standpoint, maintaining visibility into risk treatment plan status. While the role reports through GRC, projects may span security, legal, compliance, finance, and other functions depending on business need. The ideal candidate combines strong project management discipline with enough technical fluency to work credibly with engineers and security practitioners including translating security and compliance requirements into work technical teams can execute, along with the ability to build the reporting and dashboards leadership needs to track progress.

Key Responsibilities:

Remediation Project Management

• Own end-to-end delivery of remediation projects tied to SOC 2, ITGC, and regulatory compliance requirements, translating audit findings, control gaps, and new regulatory obligations (privacy, AI governance, security) into scoped plans, milestones, and assigned owners, and driving them to closure.
• Manage 2 to 4 concurrent projects across security, legal, compliance, finance, or other functions, maintaining a project plan with tracked risks, issues, and dependencies, and escalating blockers before they affect timelines.
• Translate security and compliance requirements into clear, actionable work for engineering and technical teams
• Apply Agile, waterfall, or hybrid methodologies as fits the regulatory deadline driving the work.

Risk & Compliance Program Tracking

• Support the annual risk assessment cycle and similar recurring compliance programs by maintaining schedules, coordinating stakeholder input and deadlines, and keeping deliverables on time.
• Track and report the status of risk treatment plans across owners and due dates, flagging at-risk items.
• Maintain project and risk-tracking data in the team's project management or GRC/IRM platform (e.g., Jira, Optro) as the accurate source of truth.
• Coordinate with external auditors as needed to confirm remediation deliverables meet audit requirements.

Stakeholder & Executive Reporting

• Serve as the primary point of contact for remediation and project status across Security, Legal, Compliance, Finance, and other business stakeholders.
• Build and maintain leadership-facing reporting and dashboards showing remediation progress and risk treatment plan status.
• Deliver clear, concise status updates and risk escalations to executive leadership and governance forums.
• Facilitate project meetings and working sessions, documenting decisions and action items and tracking them to closure.

Process Improvement

• Improve project management and tracking processes, templates, and tooling to increase consistency and efficiency across GRC's remediation project portfolio.
• Help mature GRC's approach to intake, prioritization, and resourcing of new remediation and compliance tracking work.

Required Qualifications:

• 6+ years of project management experience, including leading complex, cross-functional projects; 2+ years running remediation projects tied to security, compliance, or regulatory findings strongly preferred.
• Experience translating Compliance & Security requirements into technical work and managing requirements traceability through delivery.
• Demonstrated experience building leadership-facing reporting and dashboards to track project, remediation, or risk status.
• Familiarity with frameworks such as SOC 2, ITGC, or similar regulatory and compliance standards, and how audit findings and risk treatment plans translate into scoped remediation work.
• Working technical fluency: comfortable discussing cloud infrastructure, APIs, the software development lifecycle, and core security concepts with engineering and security stakeholders.
• Proven experience managing multiple concurrent projects with competing deadlines and stakeholders.
• Strong command of project management methodologies (Agile, waterfall, or hybrid) and tools (Jira, MS Project, or similar).
• Excellent verbal communication skills, including experience presenting to executive audiences.

Preferred Qualifications (Bonus Experience):

• Experience with written executive communication, such as executive summaries or briefing memos.
• Experience with GRC/IRM platforms (e.g.Optro).
• PMP, CAPM, or equivalent project management certification.
• Security certifications (Security+, CISA, CISSP).
• Experience in insurance, fintech, or another regulated industry.
  

Our interview process:

Our hiring process generally consists of 4 phases. The goal is to provide an opportunity for us to learn more about our candidates while allowing them to get to know us as well!

• Phase 1: Qualified candidates will first meet with a member of our People Operations team for a phone interview.  This discussion is a high-level conversation to understand more about your background and interests and for us to share more about Coterie and the position.
• Phase 2: Selected candidates will be invited to meet with our Hiring Manager for a 2nd interview via Teams video. This interview is designed to be more detail oriented and allows you to learn more about the role and expected to be 30 minutes in length.
• Phase 3: Top candidates will be invited to the next interview round, which will include an experiential exercise project provided in advance, followed by a 1-hour project deep-dive interview with the hiring manager and additional team members, as well as 1:1 interviews with selected team members. This series is expected to be approximately 2 hours in total and can be scheduled over a few days for flexibility.
• Phase 4: Final candidates will be invited to a 30-minute final interview with a member of our senior leadership team.
  

What's in it for you:

Coterie has excellent benefits for all full-time employees. We offer the following:

• 100% remote
• Health insurance through Aetna (we pay 100% of premiums)
• Dental and vision insurance through Guardian (we pay 100% of premiums)
• Basic life insurance (we pay 100% of premiums)
• Access to flexible spending account (FSA) or health savings account (HSA) (for those using HSA eligible plans)
• 401K plan (up 4% match with immediate vest). Must be 21 years of age or older to participate
• Flexible PTO policy offering employees up to 4 weeks of PTO in their first 12 months. Thereafter, PTO usage aligns with company standards and typically does not exceed 5 weeks per calendar year.
• 12 company-paid holidays each year
• Continuing education annual stipend
• Annual salary estimated between $115,000-$140,000 based on national data. Candidates who meet all the minimum requirements and possess additional relevant experience, as outlined in the job description, may be considered for a salary above the midpoint of the above range. Salary is based on internal equity; internal salary ranges; market data/ranges; applicant’s skills; prior relevant experience; degrees or certifications, etc. 
  

Work Authorization:
At this time, Coterie Insurance is unable to consider candidates who require current or future visa sponsorship. Applicants must have authorization to work in the United States without the need for sponsorship now or in the future. Falsification of an application, including work authorization status, is immediate grounds for dismissal from consideration.