# Sources

Employer postings are the primary evidence except where explicitly labelled. URLs are provided for auditability; job pages may subsequently close or change.

### Buyer-side role evidence

1. Cboe — GRC Platform Principal; indexed role and live filled-status page: `https://careers.cboe.com/us/en/job/R-4725/GRC-Platform-Principal`
2. Guardian — ServiceNow IRM Manager, R000110078: `https://guardianlife.wd5.myworkdayjobs.com/Guardian-Life-Careers/job/New-York/ServiceNow-Risk-Platform-Manager_R000110078`
3. UnitedHealth Group / Optum — Technical Product Owner, Enterprise GRC Platforms: `https://careers.unitedhealthgroup.com/job/houston/technical-product-owner-enterprise-grc-platforms/34088/94022373232`
4. Huntington — Senior GRC Software Developer, R0074582: `https://huntington-careers.com/search/jobdetails/senior-grc-software-developer/66c9f7d5-aa1b-43ad-9ec4-98fc5b12bd34`
5. KeyBank — Archer GRC BA, R-39119: `https://keybank.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Archer-GRC-BA_R-39119`
6. FNBO — Sr. Analyst, AI Systems Integration: `https://firstnational.wd12.myworkdayjobs.com/fnbocareers/job/Sr-Analyst--AI-Systems-Integration_R-20261209`
7. Stripe — Security GRC Program Manager, Third Party Risk: `https://stripe.com/careers/listing/security-grc-program-manager-third-party-risk/8241288`
8. Pendo — Sr. GRC Engineer: `https://job-boards.greenhouse.io/pendo/jobs/8822007002`
9. FirstMark portfolio job board — Pendo role and compensation corroboration: `https://jobs.firstmark.com/companies/pendo/jobs/94730972-sr-grc-engineer`
10. Headway — Senior GRC Analyst: `https://jobs.ashbyhq.com/headway/9e503e4c-6fea-4401-8458-c20f4d4f1e5e`
11. Built In Chicago — archived HUB International role: `https://www.builtinchicago.org/job/senior-analyst-internal-controls-sox/10138493`

### Supplier-side role evidence

12. EY — Risk Technology, GRC/IRM Platforms Manager: `https://careers.ey.com/ey/job/New-York-Risk-Consulting-Risk-Technology-GRCIRM-Platforms-Manager-NY-10001-8604/1407621533/`
13. LogicGate — Implementation Services Manager; indexed posting, subsequently redirecting: `https://job-boards.greenhouse.io/logicgate/jobs/4700060005`
14. Workiva — Senior Solution Consultant, GRC, Public Sector: `https://workiva.wd503.myworkdayjobs.com/careers/job/usa---remote/senior-solution-consultant---governance--risk--and-compliance_r12182`
15. FlexJobs — Workiva posting and OTE corroboration: `https://www.flexjobs.com/gjw/workiva/senior-solution-consultant-governance-risk-and-compliance-public-sector/publicjobs?id=bc7f03c0-9a2c-46d4-bed6-67dad62763a2`

### Official and contextual evidence

16. NIST — AI RMF Core: `https://airc.nist.gov/airmf-resources/airmf/5-sec-core/`
17. NIST — AI Risk Management Framework and revision status: `https://www.nist.gov/itl/ai-risk-management-framework`
18. Federal Reserve — 2023 interagency third-party relationship guidance: `https://www.federalreserve.gov/frrs/guidance/interagency-guidance-on-third-party-relationships.htm`
19. Federal Reserve — proposed replacement guidance, 11 September 2026: `https://www.federalreserve.gov/newsevents/pressreleases/bcreg20260911a.htm`
20. Federal Reserve — proposal details and comment deadline: `https://www.federalreserve.gov/apps/proposals/FR-2026-0031-01/details`
21. Compliance Week — Maurice Crescenzi on the gap between risk and readiness: `https://www.complianceweek.com/top-stories/maurice-l-crescenzi-jr-new-president-of-eci-compliance-week-calls-on-compliance-leaders-to-close-the-gap-between-risk-and-readiness/`
22. TPRM Podcast — published episode notes and linked video, 20 April 2026: `https://tprmpodcast.com/episodes/grc-wrong-problem`