<div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Uplight is creating a new category of energy. We make software that manages energy resources in homes and businesses—including things like smart thermostats, electric vehicles, solar panels, storage batteries, heat pumps, and even people’s behavior—to generate, shift, or save energy to balance the grid, making it more efficient and reliable. This creates clean energy capacity that can be used by the power grid instead of burning more fossil fuels. Our solutions accelerate the transition to clean energy and save money for energy customers.</div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:12.0px Times;color:rgb(0,0,0);background-color:rgb(255,255,255);"></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">We are looking for a <b>GRC Manager</b> to drive our company forward, and help us lead the clean energy revolution!</div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:12.0px Times;color:rgb(0,0,0);background-color:rgb(255,255,255);"></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>How you will make an impact:</b></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:12.0px Times;color:rgb(0,0,0);background-color:rgb(255,255,255);"></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">The GRC Manager translates strategic direction into actionable workflows, coordinates cross-functional teams, supports evidence lifecycle management, maps frameworks to controls to implementation, leads readiness activities, and ensures all GRC processes operate smoothly and efficiently. This role requires strong coordination, documentation, audit, and control-testing capabilities, paired with working technical fluency to understand control implications without performing system administration. </div><ul style="list-style-type:disc;"><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Leadership: Leads the GRC program and a team of security professionals.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Governance: Develop, document, and implement internal policies and procedures to ensure compliance with industry standards and legal requirements. Map requirements to controls and manage the company’s execution of the controls.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Risk Management: Conduct regular enterprise-wide risk assessments, maintain a risk register, and develop mitigation strategies for identified threats. Co-lead Risk Management committees.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Compliance: Lead audits and manage compliance efforts for frameworks such as SOC 2, ISO 27001, PCI-DSS, NERC-CIP, and privacy principles. Manage CAPAs for non-compliance.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Third-Party Risk: Manage vendor risk management processes, including vendor assessments and contract reviews.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Sales-cycle Support: Manage security and privacy responses to client questions and questionnaires, including RFPs, RFIs, annual risk reviews, and ad-hoc communication requests.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Business Continuity: Manage and update business continuity and disaster recovery documentation, including BIAs, plan revisions, team rosters, and dependencies. Plan, coordinate, and document annual exercises, such as tests, tabletops, and other exercises.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Awareness &amp; Training: Oversee rollout of cybersecurity and privacy awareness campaigns and required annual training and policy attestations. Monitor participation, ensure compliance, and support content preparation aligned with company and regulatory requirements.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Metrics: Build and manage security and privacy metrics program</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Technology &amp; Reporting: Select and manage GRC software tools to automate processes, monitor controls, and provide reports to executives.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Collaboration: Collaborate with IT, Security, Legal, and People teams to drive risk-informed decision-making and build a culture of compliance. </li></ul><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">We hire on value alignment first. The ideal candidate is someone who has a demonstrated passion for security and for leaving the world better than they found it. If you feel you’d be a good fit with us, consider applying.</div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:12.0px Times;color:rgb(0,0,0);background-color:rgb(255,255,255);"></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>What you bring to Uplight:</b><b></b></div><ul style="list-style-type:disc;"><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Experience: Previous experience in GRC, risk management, or internal audit, often with a mid-level leadership background.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Framework Knowledge: Proficiency in frameworks like SOC2, NIST CSF, ISO 27001, and NERC-CIP. </li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Analytical Skills: Strong ability to analyze risk data and translate complex regulations into actionable controls.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(38,38,38);background-color:rgb(255,255,255);">Communication: Excellent communication skills to interact with stakeholders and lead team efforts.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Experience with 3rd party/vendor risk management processes</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Experience in working with sales teams to complete Requests for Proposals and security questionnaires</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Understanding of GRC processes such as policy management, risk assessment, and IT audits</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Exposure to public cloud and cloud security concepts in environments like AWS, Azure or GCP</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Exceptional verbal and written communication skills</li></ul><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b></b></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>Bonus Points:</b><b></b></div><ul style="list-style-type:disc;"><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">GRC or Privacy certifications (e.g. CISA, CIPP, etc)</li></ul><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b></b></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>Why Join Uplight in Leading the Fight Against Climate Change?</b></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:12.0px Times;color:rgb(0,0,0);background-color:rgb(255,255,255);"></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">At Uplight, we're not just offering a job – we're offering a chance to be part of the solution to one of the world's biggest challenges. As a certified B Corporation, we're deeply committed to both social and environmental responsibility. Here's why you should join our team of passionate Uplighters:</div><ul style="list-style-type:disc;"><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>Make a Meaningful Impact:</b> Your work directly impacts our mission of decarbonization and building a more sustainable future.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>Grow Your Career:</b> We offer ample advancement opportunities, robust learning and development programs, and a supportive team environment that fosters collaboration and innovation.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>Thrive:</b>  We offer comprehensive benefits, including flexible time off, generous parental leave, a wellness stipend, and work flexibility to help you thrive both personally and professionally.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>Belong to an Inclusive Community:</b> We celebrate diversity and foster an inclusive workplace where everyone feels respected, empowered, and heard. Our Employee Resource Groups offer opportunities to connect with colleagues who share your interests and backgrounds.</li><li style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>Be Part of a Growing Movement:</b> Join a team of dedicated individuals who are passionate about creating a more sustainable future. We offer a collaborative environment where your ideas are valued and your contributions recognized. Together, we can build a brighter tomorrow.</li></ul><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">To learn more about our comprehensive benefits package and other perks, visit<a href="http://uplight.com/careers"><span style="text-decoration:underline;color:rgb(10,0,145);">uplight.com/careers</span></a> </div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:12.0px Times;color:rgb(0,0,0);background-color:rgb(255,255,255);"></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>Salary Range:</b> $160,000 to $180,000 USD + bonus</div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:12.0px Times;color:rgb(0,0,0);background-color:rgb(255,255,255);"></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);"><b>Application Deadline:</b> </div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">In accordance with the Colorado Equal Pay for Equal Work Act, the approximate annual base compensation range is listed above. The actual offer, reflecting the total compensation package and benefits, will be determined by a number of factors including the applicant's experience, knowledge, skills, and abilities, as well as internal equity among our team. </div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:12.0px Times;color:rgb(0,0,0);background-color:rgb(255,255,255);"></div><div style="margin:0.0px 0.0px 0.0px 0.0px;font:16.0px Arial;color:rgb(0,0,0);background-color:rgb(255,255,255);">Uplight provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race (including hair texture and hairstyles), color, religion (including head coverings), age, sex, national origin, disability status (including neurodivergence), genetics, protected veteran status, sexual orientation, gender identity or expression, neurotypicality, or any other characteristic protected by federal, state or local laws.</div>

<p>At Uplight, we are motivating energy users and providers to accelerate the clean energy ecosystem. Working with over 75 of the world&rsquo;s leading electric and gas utilities, Uplight provides end-to-end customer energy experience. Uplight delivers personalized experiences that customers have now come to expect&ndash;improving satisfaction, increasing revenue, reducing the cost to serve, and contributing to carbon reduction goals. We are in the process of obtaining our B Corp certification,&nbsp; enabling us to put our values into action by not only making decisions for the benefit of our shareholders, but also for our customers, environment, employees, and community.</p>

GRC Manager

<div>Uplight is creating a new category of energy. We make software that manages energy resources in homes and businesses—including things like smart thermostats, electric vehicles, solar panels, storage batteries, heat pumps, and even people’s behavior—to generate, shift, or save energy to balance the grid, making it more efficient and reliable. This creates clean energy capacity that can be used by the power grid instead of burning more fossil fuels. Our solutions accelerate the transition to clean energy and save money for energy customers.</div><div></div><div>We are looking for a <b>GRC Manager</b> to drive our company forward, and help us lead the clean energy revolution!</div><div></div><div><b>How you will make an impact:</b></div><div></div><div>The GRC Manager translates strategic direction into actionable workflows, coordinates cross-functional teams, supports evidence lifecycle management, maps frameworks to controls to implementation, leads readiness activities, and ensures all GRC processes operate smoothly and efficiently. This role requires strong coordination, documentation, audit, and control-testing capabilities, paired with working technical fluency to understand control implications without performing system administration. </div><ul><li>Leadership: Leads the GRC program and a team of security professionals.</li><li>Governance: Develop, document, and implement internal policies and procedures to ensure compliance with industry standards and legal requirements. Map requirements to controls and manage the company’s execution of the controls.</li><li>Risk Management: Conduct regular enterprise-wide risk assessments, maintain a risk register, and develop mitigation strategies for identified threats. Co-lead Risk Management committees.</li><li>Compliance: Lead audits and manage compliance efforts for frameworks such as SOC 2, ISO 27001, PCI-DSS, NERC-CIP, and privacy principles. Manage CAPAs for non-compliance.</li><li>Third-Party Risk: Manage vendor risk management processes, including vendor assessments and contract reviews.</li><li>Sales-cycle Support: Manage security and privacy responses to client questions and questionnaires, including RFPs, RFIs, annual risk reviews, and ad-hoc communication requests.</li><li>Business Continuity: Manage and update business continuity and disaster recovery documentation, including BIAs, plan revisions, team rosters, and dependencies. Plan, coordinate, and document annual exercises, such as tests, tabletops, and other exercises.</li><li>Awareness &amp; Training: Oversee rollout of cybersecurity and privacy awareness campaigns and required annual training and policy attestations. Monitor participation, ensure compliance, and support content preparation aligned with company and regulatory requirements.</li><li>Metrics: Build and manage security and privacy metrics program</li><li>Technology &amp; Reporting: Select and manage GRC software tools to automate processes, monitor controls, and provide reports to executives.</li><li>Collaboration: Collaborate with IT, Security, Legal, and People teams to drive risk-informed decision-making and build a culture of compliance. </li></ul><div></div><div>We hire on value alignment first. The ideal candidate is someone who has a demonstrated passion for security and for leaving the world better than they found it. If you feel you’d be a good fit with us, consider applying.</div><div></div><div><b>What you bring to Uplight:</b><b></b></div><ul><li>Experience: Previous experience in GRC, risk management, or internal audit, often with a mid-level leadership background.</li><li>Framework Knowledge: Proficiency in frameworks like SOC2, NIST CSF, ISO 27001, and NERC-CIP. </li><li>Analytical Skills: Strong ability to analyze risk data and translate complex regulations into actionable controls.</li><li>Communication: Excellent communication skills to interact with stakeholders and lead team efforts.</li><li>Experience with 3rd party/vendor risk management processes</li><li>Experience in working with sales teams to complete Requests for Proposals and security questionnaires</li><li>Understanding of GRC processes such as policy management, risk assessment, and IT audits</li><li>Exposure to public cloud and cloud security concepts in environments like AWS, Azure or GCP</li><li>Exceptional verbal and written communication skills</li></ul><div><b></b></div><div><b>Bonus Points:</b><b></b></div><ul><li>GRC or Privacy certifications (e.g. CISA, CIPP, etc)</li></ul><div><b></b></div><div><b>Why Join Uplight in Leading the Fight Against Climate Change?</b></div><div></div><div>At Uplight, we're not just offering a job – we're offering a chance to be part of the solution to one of the world's biggest challenges. As a certified B Corporation, we're deeply committed to both social and environmental responsibility. Here's why you should join our team of passionate Uplighters:</div><ul><li><b>Make a Meaningful Impact:</b> Your work directly impacts our mission of decarbonization and building a more sustainable future.</li><li><b>Grow Your Career:</b> We offer ample advancement opportunities, robust learning and development programs, and a supportive team environment that fosters collaboration and innovation.</li><li><b>Thrive:</b>  We offer comprehensive benefits, including flexible time off, generous parental leave, a wellness stipend, and work flexibility to help you thrive both personally and professionally.</li><li><b>Belong to an Inclusive Community:</b> We celebrate diversity and foster an inclusive workplace where everyone feels respected, empowered, and heard. Our Employee Resource Groups offer opportunities to connect with colleagues who share your interests and backgrounds.</li><li><b>Be Part of a Growing Movement:</b> Join a team of dedicated individuals who are passionate about creating a more sustainable future. We offer a collaborative environment where your ideas are valued and your contributions recognized. Together, we can build a brighter tomorrow.</li></ul><div>To learn more about our comprehensive benefits package and other perks, visit<a href="http://uplight.com/careers"><span>uplight.com/careers</span></a> </div><div></div><div><b>Salary Range:</b> $160,000 to $180,000 USD + bonus</div><div></div><div><b>Application Deadline:</b> </div><div>In accordance with the Colorado Equal Pay for Equal Work Act, the approximate annual base compensation range is listed above. The actual offer, reflecting the total compensation package and benefits, will be determined by a number of factors including the applicant's experience, knowledge, skills, and abilities, as well as internal equity among our team. </div><div></div><div>Uplight provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race (including hair texture and hairstyles), color, religion (including head coverings), age, sex, national origin, disability status (including neurodivergence), genetics, protected veteran status, sexual orientation, gender identity or expression, neurotypicality, or any other characteristic protected by federal, state or local laws.</div>

GRC Manager

About the Job

About the Company

Uplight

Similar Jobs

GRC Analyst

GRC Analyst

Cyber Risk, Standards & Governance Lead

Cyber Risk, Standards & Governance Lead

Senior GRC Analyst

Senior GRC Analyst

Client Success Manager, Central

Client Success Manager, Central

GRC Specialist

GRC Specialist

Senior Product Security Engineer

Senior Product Security Engineer

IT Risk and Compliance Analyst I

IT Risk and Compliance Analyst I

Staff GRC Engineer

Staff GRC Engineer

Cybersecurity Governance Specialist

Cybersecurity Governance Specialist

Global Manager Information Security & Data Protection (f/m/d)

Global Manager Information Security & Data Protection (f/m/d)