Senior GRC Manager

Your Opportunity:

Chewy is seeking a  dedicated GRC Manager that will act as the strategic lead for Chewy's GRC programs in partnership with its leadership, partners, and Team Members. This role combines a high level of expertise in GRC principles with forward-thinking program leadership to develop and implement strategies that align with Chewy’s operational objectives, risk appetite, and regulatory requirements. 

This individual will help shape the vision of GRC initiatives, driving innovative solutions, and ensuring integration of compliance across the organization. This team ensures the organization operates within regulatory requirements, with minimal risks, and upholds strong governance practices. We develop and maintain policies within industry standards and governance frameworks, providing oversight and reporting to leadership. 

The team ensures the company follows regulations like CCPA, and PCI-DSS, facilitates audit preparation, and provides training to educate employees on compliance standards. They collaborate with IT and security teams to implement robust cybersecurity controls, handle access to critical data, and prepare for incident response.

A successful GRC Manager at Chewy will work with leadership to craft  and drive alignment on Chewy’s broader GRC strategy and execution plans, and partner with Team Members and leaders across the company to drive GRC initiatives and processes.

What You’ll Do:

• Creation and enhancement of scalable GRC programs, frameworks, and policies to ensure enterprise-wide consistency and efficiency.
• Collaborate with cross-functional teams to embed risk management practices into operational processes.
• Establish and maintain governance structures that ensure accountability and visibility in decision-making.
• Create, update, and socialize policies and standards to address regulatory requirements, industry standard methodologies, and organizational needs.
• Develop comprehensive risk management frameworks to identify, assess, and mitigate risks across the enterprise.
• Monitor risk indicators and provide actionable insights to executive leadership.
• Ensure compliance with applicable laws, regulations, and standards, including SOX, CCPA, PCI DSS, and others.
• Act as a liaison with regulatory bodies, auditors, and external collaborators during reviews and audits.
• Identify and implement GRC tools and technologies to streamline processes and improve program efficiency.
• Drive innovation by exploring the use of AI, data analytics, and automation within GRC initiatives.

What You’ll Need:

• 5+ years of confirmed experience in governance, risk, and compliance roles.
• Experience in program management and the design and implementation of scalable program operations.
• Experience in writing and presenting written content to SVP and C-Suite level collaborators and leadership
• Bachelor's degree or equivalent, or 5+ years of GRC experience building strategies.
• Understanding of regulatory frameworks and compliance standards (e.g., SOX, ISO 27001).
• Leadership and ability to influence and inspire cross-functional teams.
• Analytical mentality with a focus on data-driven decision-making.
• ISACA certifications -CISA, CISSP, CISM
• Validated ability to lead multiple priorities within a fast-paced, dynamic environment.
• Expertise in using GRC technologies and tools to drive efficiency.
• Collaborate and build positive relationships with internal and external collaborators, including third-party vendors.
• Capable of delivering high-quality work and data-driven initiatives on time with the ability to handle multiple projects or programs simultaneously.
• Ability to be flexible, work through ambiguity, and succeed in a fast-paced environment while having the foresight to build mechanisms and develop strategies.
• Willing to learn new skills and implement new technologies across Chewy.

What You’ll Get:

• A place where you can be your authentic self and expand your experience. Our pet parents and partners are from everywhere--different places and different walks of life. It is what makes them unique.m Likewise, Chewtopians are encouraged to bring their points of view to deliver on our mission!
• Work with managers who value you and your career. Think big, grow with delivering results, and to become your best.
• Comprehensive medical, dental, vision benefits, in addition to wellness programs and resources, enabling you to be your best self in and outside of work.

Apply now and let’s build something phenomenal together!

#LI-SA2

The specific salary offered to a candidate may be influenced by a variety of factors including but not limited to the candidate’s relevant experience, education, and work location. In addition, this position is eligible for 401k and a new hire and annual equity grant.

We offer different types of insurance and benefits, such as medical/Rx, vision, dental, life, disability, hospital indemnity, critical illness, and accident. We offer parental leave, family services benefits, backup dependent care, flexible spending accounts, telemedicine, pet adoption reimbursement, employee assistance program, and many discounts including 10% off pet insurance and 20% off at Chewy.com. 

Exempt salary team members have unlimited PTO, subject to manager approval. Team members will receive six paid holidays per year. Team members may be eligible for paid sick and family leave in compliance with applicable state and local regulations. 

Chewy is committed to equal opportunity. We value and embrace diversity and inclusion of all Team Members. If you have a disability under the Americans with Disabilities Act or similar law, and you need an accommodation during the application process or to perform these job requirements, or if you need a religious accommodation, please contact [email protected].

If you have a question regarding your application, please contact [email protected].

To access Chewy's Customer Privacy Policy, please click here. To access Chewy's California CPRA Job Applicant Privacy Policy, please click here.