Who owns the platform, its configuration and its technical roadmap?
| Employer and advertised role | Location and evidence status | Published compensation | Responsibilities relevant to buyers | Desk interpretation |
|---|---|---|---|---|
| Cboe — GRC Platform Principal | Chicago; four office days weekly. Historical: employer page reports filled | $163,625–$211,750 base; possible incentives and equity | Platform roadmap, configuration, user experience, access controls, releases, integrations and vendor relationships | A senior operating owner, not merely an implementation coordinator. Does not prove replacement intent. (careers.cboe.com) |
| Guardian — ServiceNow IRM Manager | New York, Bethlehem, Holmdel or Stamford; three office days weekly. Indexed primary, R000110078 | $152,290–$250,195 base, stated for the primary location; possible incentives | Multi-year risk-technology strategy; IRM, business continuity and third-party risk; operations, upgrades, technical debt and mixed internal/external delivery teams | Evidence of a continuing platform-management remit across several workflows. (guardianlife.wd5.myworkdayjobs.com) |
| Optum / UnitedHealth Group — Technical Product Owner, Enterprise GRC Platforms | US remote; Houston listed. Page available, requisition 2350071; posted 29 September 2026 | $72,800–$130,000 salary | Backlogs, acceptance criteria, release delivery and production stability across Archer, Aravo and Compliance Hub | Product ownership can cover a portfolio rather than a single consolidated platform. (careers.unitedhealthgroup.com) |
| Huntington — Senior GRC Software Developer | Multiple US corporate offices; office-based. Page available, R0074582 | $57,000–$113,000 base; incentive eligibility | Develop, test and support GRC applications; implement new and existing platforms; preferred experience includes Archer, OpenPages, ProcessUnity and ServiceNow IRM | Engineering and production support belong in the operating model. The list of preferred products does not prove all are deployed. (huntington-careers.com) |
| KeyBank — Archer GRC BA | Brooklyn, Ohio, or US remote listed. Historical: expired 25 June 2026, R-39119 | $96,000–$181,000 base; incentive eligibility | Requirements, process diagrams, role definitions, testing and ongoing application enhancement | Business analysis and acceptance testing are distinct delivery responsibilities—not work that should disappear into a generic administrator allowance. (keybank.wd5.myworkdayjobs.com) |
| FNBO — Sr. Analyst, AI Systems Integration | Omaha; three office days weekly. Indexed primary, R-20261209 | $81,662–$134,741 base | Maintain an AI-enabled legal, risk and compliance knowledgebase; refine prompts and workflows; validate outputs; support Archer-related AI capabilities | AI deployment creates configuration, evaluation and maintenance work as well as potential automation benefits. (firstnational.wd12.myworkdayjobs.com) |
Buyer implication: distinguish ownership from execution. Cboe explicitly described a platform-ownership role that did not require hands-on software development, while Huntington sought development and production-support capability. Our recommendation is to decide who sets priorities, who builds changes and who accepts them before deciding whether those duties require separate hires. (careers.cboe.com)
Who operates assessments, controls and evidence workflows?
| Employer and advertised role | Location and evidence status | Published compensation | Responsibilities relevant to buyers | Desk interpretation |
|---|---|---|---|---|
| Stripe — Security GRC Program Manager, Third Party Risk | US remote. Page available, job 8241288 | $131,200–$196,800 base; other rewards may apply | Supplier assessments, assurance-document review, remediation, risk acceptance and operational reporting; records decisions in Zip and Aravo | A strong signal of assessment capacity and process improvement, but weak evidence of a new platform purchase. (stripe.com) |
| Pendo — Sr. GRC Engineer | Raleigh office. Page available, job 8822007002 | $133,400–$160,000 advertised annual range | Compliance-programme ownership, AI-assisted evidence and testing workflows, risk prioritisation and incident-response leadership | “GRC engineer” can describe a broad security role; do not assume it means a dedicated connector developer. (job-boards.greenhouse.io) |
| Headway — Senior Governance, Risk, Compliance Analyst | San Francisco, New York or Seattle; hybrid. Indexed primary | $161,600–$202,000 base; possible equity | Establish the GRC function; use modern tooling and evidence automation; experience with platforms such as Vanta, Drata or OneTrust | A function-building mandate is a stronger readiness signal than routine administration, but does not establish a selected vendor. (jobs.ashbyhq.com) |
| HUB International — Senior Analyst, Internal Controls & SOX | Chicago. Secondary archive: removed 24 July 2026 | $90,000–$110,000 salary | IT controls, SOX scoping and testing, remediation and Workiva system administration | Platform administration may be embedded in a controls role rather than advertised as separate headcount. (builtinchicago.org) |
The HUB example is particularly useful for finance and audit sponsors: an analyst title can conceal an additional system-administration responsibility. Our recommendation is to make that allocation explicit, with time for access reviews, configuration, support and release testing rather than treating administration as incidental work. (builtinchicago.org)
Sources cited on this page
- careers.cboe.com ↗careers.cboe.com
- guardianlife.wd5.myworkdayjobs.com ↗guardianlife.wd5.myworkdayjobs.com
- careers.unitedhealthgroup.com ↗careers.unitedhealthgroup.com
- huntington-careers.com ↗huntington-careers.com
- keybank.wd5.myworkdayjobs.com ↗keybank.wd5.myworkdayjobs.com
- firstnational.wd12.myworkdayjobs.com ↗firstnational.wd12.myworkdayjobs.com
- stripe.com ↗stripe.com
- job-boards.greenhouse.io ↗job-boards.greenhouse.io
- jobs.ashbyhq.com ↗jobs.ashbyhq.com
- builtinchicago.org ↗www.builtinchicago.org
- builtinchicago.org ↗www.builtinchicago.org