At MacPaw, we craft software that makes everyday tech life simpler, cleaner, and more enjoyable. From globally loved products like CleanMyMac and Setapp to emerging cybersecurity tools like ClearVPN and Moonlock, we are building a product ecosystem that reaches millions of people worldwide.
We believe humans and technology can reach their greatest potential together. By fusing high engineering standards, thoughtful design, and practical AI, we rethink how people interact with their devices and shape the daily tech routines of the future.
Working at MacPaw means owning outcomes, not just tasks. We build for global scale from day one, giving you the trust, freedom, and room to experiment.
In our team, we challenge ideas directly, support each other genuinely, and build software that makes a meaningful difference — both in the tech world and beyond.
We’re looking for a Senior Risk Manager (GRC) to join our team and help strengthen our enterprise risk management, operational resilience, and governance practices.
As a Senior Risk Manager, you will help take MacPaw’s risk management practices to the next level. You’ll work across business, product, and service teams to identify and manage risks, turn them into actionable mitigation plans, strengthen business continuity, and contribute to the development of our AI Governance practices.
This role is a great fit for someone who sees risk management as a way to enable better business decisions — not simply as a compliance exercise.
If you’re excited to strengthen MacPaw’s operational resilience and help shape the next stage of our risk and governance practices, we’d love to hear from you! In this role, you will: * Maintain and further develop enterprise risk registers across business, product, facilities, and company-wide risks. * Partner with risk owners across MacPaw to develop practical mitigation plans and integrate them into team priorities and OKRs. * Strengthen Business Continuity Planning (BCP) and operational resilience across core and non-core business functions, including incident and crisis-management preparedness. * Contribute to MacPaw’s AI Governance practices by supporting the AI system inventory, classification under the EU AI Act, and review processes for new AI use cases together with Legal, Compliance, and Product teams. * Support information security and company-wide audits, including SOC2 and ISO-related activities within your area of expertise. * Prepare risk insights and reporting for internal governance forums, including the Risk Committee.
Skills you’ll need to bring: * Solid experience in Enterprise Risk Management (ERM), GRC, or risk management, ideally within a technology, SaaS, product, or high-growth company. * Demonstrable experience building or maturing ERM frameworks and risk registers — not only maintaining established processes. * Hands-on experience developing risk mitigation plans and working with stakeholders to translate identified risks into concrete actions. * Hands-on experience with Business Continuity Planning (BCP), operational resilience, and crisis management. * Practical experience or strong working knowledge of EU technology regulation and AI Governance, such as the EU AI Act, GDPR, CRA, ISO/IEC 42001, NIST AI RMF, or similar frameworks. * Familiarity with GRC tools, workflow automation, dashboards, and data-driven risk reporting. * Strong stakeholder management and communication skills, with the ability to influence and collaborate with teams at different levels of risk-management maturity. * A business-enabler mindset and the ability to balance risk considerations with business needs and strategic priorities. * Strong written and spoken English (B2+), with confidence communicating with international stakeholders.
As a plus: * Experience working in an international environment with exposure to European, UK, and/or US regulatory or corporate governance practices. * Experience preparing risk reporting for senior leadership or an independent Board of Directors. * Professional certifications in risk management, business continuity, information security, or compliance.
