Program Manager, GRC at Abnormalsecurity

About the Role Abnormal AI is seeking an experienced Project Manager with a primary focus on supporting Governance, Risk, and Compliance (GRC) initiatives across the CIO organization. This role serves as the primary delivery partner for the GRC function, while also supporting broader, cross-functional initiatives spanning Security, IT, Privacy, and other CIO-aligned teams as business priorities evolve. As an AI-native cybersecurity company, Abnormal approaches delivery with an emphasis on automation, intelligent tooling, and continuous optimization. This role is responsible for driving the successful execution of GRC and CIO-sponsored initiatives, agilely adapting project management practices to project complexity, and leveraging AI-enabled tools and insights to improve planning, execution, and reporting. Projects will vary in size, scope, and maturity, requiring sound judgment and flexibility in how rigor and structure are applied. The ideal candidate brings strong project management fundamentals, comfort operating in ambiguity, and a working understanding of GRC and security-driven initiatives. You thrive in fast-moving environments, bring a growth mindset, and continuously seek better, more efficient ways to deliver outcomes. Who you are • 4+ years of experience in project management, technical project management, or program delivery, with exposure to GRC, Security, or compliance-adjacent initiatives • A strong project manager who can lead large, cross-functional, and often technical initiatives, translating complex requirements into clear, actionable delivery plans • Highly skilled in documentation and reporting, with the ability to maintain clear processes, status reporting, dashboards, and project artifacts across a portfolio of work • Detail-oriented, process-minded, and motivated to bring structure and clarity to complex, multi-stakeholder efforts • Results-oriented, collaborative, and self-directed, with the ability to adapt quickly in a high-growth, fast-changing environment • Intellectually curious and a problem solver, constantly looking for ways to improve execution, simplify workflows, and increase impact through automation and smarter tooling • An exceptional communicator who can collaborate effectively with both technical and non-technical stakeholders and represent GRC and CIO initiatives with credibility and clarity • Demonstrated experience managing cross-functional, security- or compliance-adjacent projects • Technically adept, able to leverage a technical foundation to gain trust, accelerate delivery, and partner effectively with engineering, security, and platform teams • Working knowledge of governance, risk, and compliance concepts, or experience supporting security, audit, or regulatory initiatives What you will do • Own and drive the GRC project portfolio, partnering closely with the GRC team to define project goals, deliverables, success criteria, and execution plans across initiatives • Support delivery of broader CIO-sponsored initiatives as needed, flexing across Security, IT, Privacy, Legal, Finance, HR, and other cross-functional teams • Manage end-to-end project delivery, including scoping, planning, execution, dependency management, risk mitigation, and project closure, tailoring rigor and methodology based on project complexity • Translate complex technical requirements into project plans with clearly defined milestones, owners, dependencies and timelines • Coordinate and support internal and external audits and certification efforts, including timeline management, requirements gathering, evidence tracking, and remediation closure • Define, implement, and track KPIs and delivery metrics that measure execution effectiveness, efficiency, and stakeholder satisfaction, using insights to continuously improve delivery practices • Design and iterate on repeatable project management practices for intake, prioritization, risk management, and portfolio-level reporting • Proactively identify and manage risks, dependencies, and tradeoffs, enabling informed, risk-based decision-making when priorities or constraints shift • Maintain clear, consistent communication with project teams, stakeholders, and leadership on status, risks, progress, and outcomes • Contribute to strategic, annual, and quarterly planning activities, supporting roadmap development, capacity planning, and cross-functional alignment • Leverage AI-enabled tools and approaches to improve planning accuracy, automate reporting, enhance visibility, and reduce manual project administration Must Haves • 4-6 years of professional experience in technical project management, delivering cutting-edge technical solutions, preferably in a startup or fast-paced environment • Demonstrated experience delivering initiatives for GRC, Security, Risk, Compliance, or adjacent functions (e.g., audit readiness, compliance programs, risk remediation, control or policy implementation) • Strong understanding of governance, risk management, and compliance fundamentals, as well as core security concepts and their practical application • Proven ability to lead cross-functional programs and drive accountability without direct authority • Excellent written and verbal communication skills, with experience presenting status, risks, and tradeoffs to diverse audiences • Hands-on experience using project management tools such as ServiceNow, Jira, Microsoft Project, Linear, or equivalent enterprise platforms • Demonstrated ability to develop and maintain high-quality documentation and reporting, including project plans, dashboards, runbooks, and retrospectives • Bachelor's degree in Computer Engineering, Information Technology, Business Administration, Information Security or a related field • Capable of translating and communicating highly technical requirements in a way that focuses on customer or business impact • Experience in collaborating with and meeting the needs of customers and teammates at a global corporation Nice to Have • Experience working with SaaS products or software engineering teams, particularly in cybersecurity or cloud-native environments • Familiarity with AI-driven workflows, automation tools, or data-informed delivery practices • Certifications such as PMP, SAFe, CRISC, CISSP, CISA, or CISM • Direct experience managing projects in Linear, or similar AI-native Project Management tools • Experience with GRC platforms such as Drata or similar tooling • Experience operating in regulated or public company environments and familiarity with common compliance frameworks (e.g., SOC 2, ISO) • Experience working in a remote-first environment with globally distributed teams #LI-EM5 At Abnormal AI, certain roles are eligible for a bonus, restricted stock units (RSUs), and benefits. Individual compensation packages are based on factors unique to each candidate, including their skills, experience, qualifications and other job-related reasons. Base salary range:$114,800—$135,000 USD Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please click here. If you would like more information on your EEO rights under the law, please click here.