GRC Manager – Fixed-Term (till Apr 2028)

About the role

We are looking for a GRC Manager to lead the Information Security Assurance & Governance function for Printful & Printify. You will own cybersecurity risk management, vendor oversight, compliance, and security awareness across the organisation.

Key responsibilities

• Facilitate onboarding and annual reviews of third‑party vendors, including security assessments.
• Develop, maintain and update information security policies and procedures.
• Conduct risk assessments, track remediation plans and ensure timely closure of identified risks.
• Ensure compliance with standards such as ISO 27001, SOC 2, NIST and PCI‑DSS, and drive internal and external audits.
• Create and deliver security awareness and training programs on governance, risk and compliance topics.

Required profile

• 5+ years of experience in cybersecurity, vendor management, risk management, IT audit or compliance.
• Hands‑on experience implementing ISO 27001, SOC 2, PCI‑DSS or similar frameworks.
• Strong problem‑solving mindset and ability to communicate complex ideas to technical and non‑technical audiences.
• Fluent English; certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer/Auditor or CompTIA Security+ are a plus.

Required skills

• ISO 27001
• SOC 2
• NIST
• PCI‑DSS
• Risk assessment
• Vendor management
• Security policy development
• Security awareness training

What we offer

• Monthly gross salary EUR 4,000–5,000, based on experience.
• Hybrid work model with flexible hours (start as late as 11 AM).
• Private health insurance and extra paid days for wellbeing and personal celebrations.
• Learning opportunities, mentorship, internal meetups and hackathons.
• Free healthy lunch for employees working from the Riga office.