# Which enterprise GRC platform roles are organisations hiring for?

### Who owns the platform, its configuration and its technical roadmap?

| Employer and advertised role | Location and evidence status | Published compensation | Responsibilities relevant to buyers | Desk interpretation |
|---|---|---:|---|---|
| **Cboe — GRC Platform Principal** | Chicago; four office days weekly. **Historical:** employer page reports filled | **$163,625–$211,750 base**; possible incentives and equity | Platform roadmap, configuration, user experience, access controls, releases, integrations and vendor relationships | A senior operating owner, not merely an implementation coordinator. Does not prove replacement intent. ([careers.cboe.com](https://careers.cboe.com/us/en/job/R-4725/GRC-Platform-Principal?utm_source=openai)) |
| **Guardian — ServiceNow IRM Manager** | New York, Bethlehem, Holmdel or Stamford; three office days weekly. **Indexed primary**, R000110078 | **$152,290–$250,195 base**, stated for the primary location; possible incentives | Multi-year risk-technology strategy; IRM, business continuity and third-party risk; operations, upgrades, technical debt and mixed internal/external delivery teams | Evidence of a continuing platform-management remit across several workflows. ([guardianlife.wd5.myworkdayjobs.com](https://guardianlife.wd5.myworkdayjobs.com/Guardian-Life-Careers/job/New-York/ServiceNow-Risk-Platform-Manager_R000110078?utm_source=openai)) |
| **Optum / UnitedHealth Group — Technical Product Owner, Enterprise GRC Platforms** | US remote; Houston listed. **Page available**, requisition 2350071; posted **29 September 2026** | **$72,800–$130,000 salary** | Backlogs, acceptance criteria, release delivery and production stability across Archer, Aravo and Compliance Hub | Product ownership can cover a portfolio rather than a single consolidated platform. ([careers.unitedhealthgroup.com](https://careers.unitedhealthgroup.com/job/houston/technical-product-owner-enterprise-grc-platforms/34088/94022373232?utm_source=openai)) |
| **Huntington — Senior GRC Software Developer** | Multiple US corporate offices; office-based. **Page available**, R0074582 | **$57,000–$113,000 base**; incentive eligibility | Develop, test and support GRC applications; implement new and existing platforms; preferred experience includes Archer, OpenPages, ProcessUnity and ServiceNow IRM | Engineering and production support belong in the operating model. The list of preferred products does not prove all are deployed. ([huntington-careers.com](https://huntington-careers.com/search/jobdetails/senior-grc-software-developer/66c9f7d5-aa1b-43ad-9ec4-98fc5b12bd34)) |
| **KeyBank — Archer GRC BA** | Brooklyn, Ohio, or US remote listed. **Historical:** expired **25 June 2026**, R-39119 | **$96,000–$181,000 base**; incentive eligibility | Requirements, process diagrams, role definitions, testing and ongoing application enhancement | Business analysis and acceptance testing are distinct delivery responsibilities—not work that should disappear into a generic administrator allowance. ([keybank.wd5.myworkdayjobs.com](https://keybank.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Archer-GRC-BA_R-39119?utm_source=openai)) |
| **FNBO — Sr. Analyst, AI Systems Integration** | Omaha; three office days weekly. **Indexed primary**, R-20261209 | **$81,662–$134,741 base** | Maintain an AI-enabled legal, risk and compliance knowledgebase; refine prompts and workflows; validate outputs; support Archer-related AI capabilities | AI deployment creates configuration, evaluation and maintenance work as well as potential automation benefits. ([firstnational.wd12.myworkdayjobs.com](https://firstnational.wd12.myworkdayjobs.com/fnbocareers/job/Sr-Analyst--AI-Systems-Integration_R-20261209?utm_source=openai)) |

**Buyer implication:** distinguish ownership from execution. Cboe explicitly described a platform-ownership role that did not require hands-on software development, while Huntington sought development and production-support capability. Our recommendation is to decide who sets priorities, who builds changes and who accepts them before deciding whether those duties require separate hires. ([careers.cboe.com](https://careers.cboe.com/us/en/job/R-4725/GRC-Platform-Principal?utm_source=openai))

### Who operates assessments, controls and evidence workflows?

| Employer and advertised role | Location and evidence status | Published compensation | Responsibilities relevant to buyers | Desk interpretation |
|---|---|---:|---|---|
| **Stripe — Security GRC Program Manager, Third Party Risk** | US remote. **Page available**, job 8241288 | **$131,200–$196,800 base**; other rewards may apply | Supplier assessments, assurance-document review, remediation, risk acceptance and operational reporting; records decisions in Zip and Aravo | A strong signal of assessment capacity and process improvement, but weak evidence of a new platform purchase. ([stripe.com](https://stripe.com/careers/listing/security-grc-program-manager-third-party-risk/8241288?gh_src=General+Catalyst+job+board&utm_source=openai)) |
| **Pendo — Sr. GRC Engineer** | Raleigh office. **Page available**, job 8822007002 | **$133,400–$160,000 advertised annual range** | Compliance-programme ownership, AI-assisted evidence and testing workflows, risk prioritisation and incident-response leadership | “GRC engineer” can describe a broad security role; do not assume it means a dedicated connector developer. ([job-boards.greenhouse.io](https://job-boards.greenhouse.io/pendo/jobs/8822007002)) |
| **Headway — Senior Governance, Risk, Compliance Analyst** | San Francisco, New York or Seattle; hybrid. **Indexed primary** | **$161,600–$202,000 base**; possible equity | Establish the GRC function; use modern tooling and evidence automation; experience with platforms such as Vanta, Drata or OneTrust | A function-building mandate is a stronger readiness signal than routine administration, but does not establish a selected vendor. ([jobs.ashbyhq.com](https://jobs.ashbyhq.com/headway/9e503e4c-6fea-4401-8458-c20f4d4f1e5e?utm_source=openai)) |
| **HUB International — Senior Analyst, Internal Controls & SOX** | Chicago. **Secondary archive:** removed **24 July 2026** | **$90,000–$110,000 salary** | IT controls, SOX scoping and testing, remediation and Workiva system administration | Platform administration may be embedded in a controls role rather than advertised as separate headcount. ([builtinchicago.org](https://www.builtinchicago.org/job/senior-analyst-internal-controls-sox/10138493?utm_source=openai)) |

The HUB example is particularly useful for finance and audit sponsors: an analyst title can conceal an additional system-administration responsibility. **Our recommendation is to make that allocation explicit**, with time for access reviews, configuration, support and release testing rather than treating administration as incidental work. ([builtinchicago.org](https://www.builtinchicago.org/job/senior-analyst-internal-controls-sox/10138493))