Senior IT Governance & Compliance Manager

At LogicGate, we recognize that exceptional talent comes in all shapes and forms, and that there is no such thing as a 'perfect' candidate. The qualifications below represent the core competencies, skills, and experiences that align most closely with the day-to-day responsibilities of this role - if you don't check every single box and are excited about this work, we still highly encourage you to apply.

About the Role

LogicGate is seeking a Senior IT Governance & Compliance Manager to serve as a principal subject matter expert and trusted advisor driving our enterprise security and compliance posture. In this high-impact individual contributor role, you will partner cross-functionally with Sales, Legal, Product, and Engineering to embed risk-aware thinking across the business while streamlining audit readiness and vendor risk operations. You will balance regulatory rigor with business agility, using automation and modern GRC strategies to safeguard customer trust and accelerate enterprise growth.

What You’ll Do

• Program Strategy: Drive the continuous maturity, scaling, and operational excellence of LogicGate's IT governance, risk, and compliance frameworks in alignment with evolving business goals and regulatory standards.
• Third-Party Risk Management: Own and scale our Third-Party Risk Management (TPRM) program end-to-end, conducting thorough risk assessments of vendors and subprocessors to deliver actionable risk mitigation strategies.
• Sales & Revenue Enablement: Partner with Sales and Revenue Operations to handle complex enterprise customer security inquiries, leveraging automation to accelerate response times and remove deal friction.
• Cross-Functional Advisory: Provide expert risk and compliance guidance on cybersecurity contract terms, vendor agreements, and strategic business initiatives in close collaboration with Legal and Operations.
• Audit & Compliance Execution: Lead internal preparation and external audit execution for SOC 2 Type II, ISO 27001, and recurring compliance attestations to demonstrate ongoing control effectiveness.
• Policy & Risk Governance: Author, maintain, and enforce enterprise security policies, standards, and risk management frameworks that support a high-performance, security-first culture.
• AI & Automation Integration: Evaluate and deploy modern AI-driven tools, automated evidence-gathering workflows, and platform intelligence to eliminate manual compliance overhead and optimize program performance.
• Thought Leadership: Act as an internal authority and external representative on IT governance, providing actionable insights on emerging industry trends, regulatory changes, and GRC best practices.

 

What You Bring

Required:

• Domain Expertise: 7+ years of progressive experience in IT governance, risk, and compliance (GRC), IT auditing, or cybersecurity, with a track record of driving enterprise compliance programs.
• Framework Mastery: Deep hands-on experience managing and auditing frameworks such as SOC 2 Type II, ISO 27001, NIST CSF, and relevant data privacy regulations (GDPR, CCPA).
• AI Literacy & Technological Curiosity: Demonstrated experience leveraging AI tools, LLMs, or automated GRC platforms to streamline evidence collection, vendor risk evaluations, or security questionnaire workflows.
• Strategic Communication: Strong consultative and advisory skills with a proven ability to translate complex risk concepts into clear, business-focused recommendations for executive leadership and cross-functional partners.
• Flexibility for On-Site Engagement: Willingness and ability to travel as needed for team planning workshops, customer meetings, and company gatherings.

Nice to Have:

• Industry Certifications: Hold active professional certifications such as CISA, CRISC, CISM, or CISSP.
• Platform Experience: Direct experience administering or building workflows in modern GRC platforms (ideally LogicGate Risk Cloud).
• AI Governance Exposure: Familiarity with emerging AI governance frameworks (e.g., NIST AI RMF, ISO 42001) or evaluating risk within cloud-native environments (AWS).

The anticipated base salary range for the role is $115,000 - $140,000 per year + variable + equity + benefits. Actual salaries may vary and will be based on factors, such as the candidate's qualifications, skills, competencies, and proficiency for the role. Internal candidates who have current pay within or above the hiring range are still encouraged to apply if interested.

Office Location

This role is required to be based in our Chicago HQ or Bellevue office. We believe in-person collaboration strengthens how we support our customers and our teams.