Senior Manager, Enterprise Governance & Assurance

The Team

The Enterprise Governance & Assurance team (EGA) is responsible for enabling Netflix to operate securely while meeting regulatory obligations. The team encompasses Governance, Risk, Compliance, Business Continuity, and a dedicated engineering function. We partner across the organization to ensure Netflix has right sized security policies, maintains appropriate controls, manages enterprise risk, and demonstrates compliance with regulatory requirements including SOX, PCI-DSS, GDPR, and others. 

The Role

We are looking for an accomplished senior leader to lead and grow a team of high-performing GRC, business continuity and software engineering professionals while working to mature Netflix's Enterprise Governance and Cybersecurity Assurance capabilities. This is a pivotal and high-impact role responsible for setting the strategic vision and execution across multiple functions. You’ll partner  broadly across the enterprise to meet continually evolving regulatory requirements in a fast moving and complex environment. You’ll be instrumental in driving a pragmatic, risk-driven, and scalable GRC program with a strong emphasis on modern, engineering first approaches. 

Desired Background

  • 10+ years in a combination of GRC, technology risk, compliance, audit/cybersecurity assurance, security governance, and/or operational resilience, with at least 4 in a leadership role.

  • You have a proven track record of building and growing high-performing teams.

  • You have a proven track record of building governance operating models that scale with organizational growth, changing risk landscapes, and right sized to the businesses risk appetite.

  • Demonstrated success building controls and cybersecurity assurance programs that stand up to external scrutiny.

  • You have deep expertise in regulatory and compliance frameworks and regimes including but not limited to: SOX, PCI-DSS, GDPR, and ISO-27001.

  • You prefer risk-driven, scalable approaches over checkbox compliance and understand how to right-size controls based on actual business risk.

  • You have experience building or leading GRC engineering functions that automate compliance workflows, generate metrics, and reduce manual burden.

  • You are comfortable operating in a cloud-native, engineering-driven environment and can translate compliance requirements into technical solutions.

  • You are a meticulous and responsive cross-team communicator who can work effectively with legal, finance, engineering, and executive stakeholders.

  • You are an empathetic leader who cultivates a culture of psychological safety and inclusion where all team members can do their best work.

  • You can successfully coach, mentor, develop, and inspire a talented and diverse team across seniority levels.

  • You operate effectively in highly ambiguous and rapidly changing environments with minimal process and a heavy emphasis on individual responsibility.

Back to blog