Sources

Employer postings are the primary evidence except where explicitly labelled. URLs are provided for auditability; job pages may subsequently close or change.

Buyer-side role evidence

1. Cboe — GRC Platform Principal; indexed role and live filled-status page: https://careers.cboe.com/us/en/job/R-4725/GRC-Platform-Principal
2. Guardian — ServiceNow IRM Manager, R000110078: https://guardianlife.wd5.myworkdayjobs.com/Guardian-Life-Careers/job/New-York/ServiceNow-Risk-Platform-Manager_R000110078
3. UnitedHealth Group / Optum — Technical Product Owner, Enterprise GRC Platforms: https://careers.unitedhealthgroup.com/job/houston/technical-product-owner-enterprise-grc-platforms/34088/94022373232
4. Huntington — Senior GRC Software Developer, R0074582: https://huntington-careers.com/search/jobdetails/senior-grc-software-developer/66c9f7d5-aa1b-43ad-9ec4-98fc5b12bd34
5. KeyBank — Archer GRC BA, R-39119: https://keybank.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Archer-GRC-BA_R-39119
6. FNBO — Sr. Analyst, AI Systems Integration: https://firstnational.wd12.myworkdayjobs.com/fnbocareers/job/Sr-Analyst--AI-Systems-Integration_R-20261209
7. Stripe — Security GRC Program Manager, Third Party Risk: https://stripe.com/careers/listing/security-grc-program-manager-third-party-risk/8241288
8. Pendo — Sr. GRC Engineer: https://job-boards.greenhouse.io/pendo/jobs/8822007002
9. FirstMark portfolio job board — Pendo role and compensation corroboration: https://jobs.firstmark.com/companies/pendo/jobs/94730972-sr-grc-engineer
10. Headway — Senior GRC Analyst: https://jobs.ashbyhq.com/headway/9e503e4c-6fea-4401-8458-c20f4d4f1e5e
11. Built In Chicago — archived HUB International role: https://www.builtinchicago.org/job/senior-analyst-internal-controls-sox/10138493

Supplier-side role evidence

12. EY — Risk Technology, GRC/IRM Platforms Manager: https://careers.ey.com/ey/job/New-York-Risk-Consulting-Risk-Technology-GRCIRM-Platforms-Manager-NY-10001-8604/1407621533/
13. LogicGate — Implementation Services Manager; indexed posting, subsequently redirecting: https://job-boards.greenhouse.io/logicgate/jobs/4700060005
14. Workiva — Senior Solution Consultant, GRC, Public Sector: https://workiva.wd503.myworkdayjobs.com/careers/job/usa---remote/senior-solution-consultant---governance--risk--and-compliance_r12182
15. FlexJobs — Workiva posting and OTE corroboration: https://www.flexjobs.com/gjw/workiva/senior-solution-consultant-governance-risk-and-compliance-public-sector/publicjobs?id=bc7f03c0-9a2c-46d4-bed6-67dad62763a2

Official and contextual evidence

16. NIST — AI RMF Core: https://airc.nist.gov/airmf-resources/airmf/5-sec-core/
17. NIST — AI Risk Management Framework and revision status: https://www.nist.gov/itl/ai-risk-management-framework
18. Federal Reserve — 2023 interagency third-party relationship guidance: https://www.federalreserve.gov/frrs/guidance/interagency-guidance-on-third-party-relationships.htm
19. Federal Reserve — proposed replacement guidance, 11 September 2026: https://www.federalreserve.gov/newsevents/pressreleases/bcreg20260911a.htm
20. Federal Reserve — proposal details and comment deadline: https://www.federalreserve.gov/apps/proposals/FR-2026-0031-01/details
21. Compliance Week — Maurice Crescenzi on the gap between risk and readiness: https://www.complianceweek.com/top-stories/maurice-l-crescenzi-jr-new-president-of-eci-compliance-week-calls-on-compliance-leaders-to-close-the-gap-between-risk-and-readiness/
22. TPRM Podcast — published episode notes and linked video, 20 April 2026: https://tprmpodcast.com/episodes/grc-wrong-problem