As MacPaw grows internationally, the importance of strong governance, risk, and compliance foundations grows with it — across jurisdictions, regulatory landscapes, and evolving global standards. This creates both responsibility and opportunity: to build robust GRC frameworks that not only ensure compliance but also protect the business and support strategic decision-making at scale.
We're looking for a Senior GRC Professional to design and lead our enterprise-wide governance, risk, and compliance function. In this role, you'll build frameworks from the ground up, shape corporate policy, and turn complex regulatory requirements into clear, structured solutions that work across the organization.
In this role, you will:
- Design, develop, and maintain the Enterprise Risk Management (ERM) framework, risk taxonomy, and Compliance Management System (CMS) methodology across the organization.
- Draft and keep current our high-level corporate policies — Code of Conduct, Anti-Corruption, Whistleblowing, Risk Appetite, and Data Protection Governance frameworks.
- Design the Conflict of Interest governance model and establish standards, templates, and DPIA methodologies for business units.
- Build and maintain Internal Control evaluation methodologies aligned with COSO IC, guiding business units on complex matters.
- Develop Risk and Compliance Maturity Models and lead annual assessments to identify and prioritize strategic improvement areas.
- Prepare consolidated GRC reports for senior management and monitor regulatory developments across the EU, UK, and US to keep our framework proactive and current.
- Lead investigations and manage complex regulatory matters, ensuring thorough documentation and timely resolution.
Skills you’ll need to bring:
- 5+ years of experience in enterprise risk management, compliance leadership, or governance roles.
- Demonstrated experience designing frameworks aligned with ISO 31000, ISO 37301, ISO 37001, or COSO ERM.
- Hands-on experience developing corporate policies, methodologies, and maturity models.
- Proven experience leading investigations or managing complex regulatory matters.
- Experience preparing reports for senior management or Board-level audiences.
- Strong analytical thinking, attention to detail, and the ability to manage multiple priorities in a complex environment.
- English at B1 or above and strong communication skills to collaborate with internal stakeholders and external advisors.
- Master's degree in Law, Risk Management, Corporate Governance, Finance, or a related field.
As a plus:
- Professional certifications in ISO 31000, ISO 37301, ISO 37001, CCEP, CRCM, CRMA, CISA, or similar.
- Experience with Data Protection governance and DPIA methodologies.
- Background in third-party risk assessments.
- Additional executive education in governance or risk management.