GRC Manager

At Miovision, we’re unlocking transportation networks that move you. Our vision and mission is to enable smart, fast, safe communities that simply flow, as we drive the Intelligent Mobility Revolution. Backed by the world’s most advanced traffic AI, Miovision’s innovations in traffic signal planning and operations are making it possible for cities to improve the transportation experience for drivers, cyclists and pedestrians.

Miovision is seeking a seasoned GRC Manager / Risk Officer to lead and mature the company's Enterprise Risk Management (ERM) capability as a strategic enabler of product-led growth and regulated market expansion. Reporting to the Chief Information Security Officer (CISO) and embedded within the Office of Cybersecurity, this role operationalizes Miovision's Unified Risk Management Framework to ensure risk management directly supports revenue growth, go-to-market execution, and on-time product delivery;

acting as a trusted advisor to the CISO, executive leadership, and external auditors.

The GRC Manager / Risk Officer will drive implementation and ongoing effectiveness of security and risk controls aligned to ISO/IEC 27001:2022, SOC 2, FAIR, COSO, and NIST, ensuring audit-ready execution across the organization. Partnering with stakeholders across Revenue and GTM, Engineering, Product Delivery, Cloud Operations, IT, Legal, HR, and Finance, this leader translates cybersecurity, technology, regulatory, product, and operational risks into clear, business-relevant insights that inform executive decision-making and accelerate regulated market entry.

This role leads the GRC function, mentors and manages team members, and embeds risk intelligence across Miovision's mission-critical platforms; including Bakugan, Scout X, Miovision One, and I2X—to protect smart mobility solutions, strengthen resilience, and reinforce customer trust. The successful candidate will serve as a strategic risk leader, not a compliance administrator, enabling growth while maintaining robust governance and control.

• Lead the implementation and continuous improvement of Miovision’s Unified Risk Management Framework, integrating cybersecurity, technology, operational, privacy, product, and third-party risk into the CTO delivery focus model and quarterly business review (Q ) cadence, ensuring risk insights directly inform delivery prioritization, roadmap decisions, and executive trade-offs.
• Own and maintain the Enterprise Risk Register, including risk identification, assessment and scoring, treatment plan development, control ownership assignment, and executive-level reporting to the CISO, CTO, and executive leadership team.
• Partner with the CISO to define, communicate, and operationalize risk appetite and tolerance levels aligned with business objectives, growth strategy, and regulated market expansion initiatives.
• Embed risk intelligence into product development life cycles for Bakugan, Scout X, Miovision One, and I2X platforms, ensuring security and compliance requirements are integrated early and balanced against delivery timelines.

• Design, implement, and maintain the GRC program structure, ensuring alignment and harmonization across ISO/IEC 27001:2022, SOC 2, NIST, COSO, and other applicable frameworks to minimize audit fatigue, reduce control duplication, and streamline evidence collection.
• Serve as the primary liaison for external auditors, assessors, penetration testers, and regulators, coordinating audit planning, evidence requests, remediation tracking, and certification readiness activities.
• Lead policy and procedure governance, including development, review, approval workflows, version control, and communication across the organization.
• Manage the risk exception and risk acceptance process, ensuring documented justification, compensating controls, executive approval, and time-bound remediation plans.
• Oversee GRC tooling strategy and administration, ensuring effective use of platforms for risk tracking, control monitoring, evidence management, and audit readiness.

• Embed risk management as a delivery prerequisite,…