Arch Capital Group Ltd.

Manager, IT Governance, Risk & Compliance (Remote - West Coast)

Home Base, CA Full time

With a company culture rooted in collaboration, expertise and innovation, we aim to promote progress and inspire our clients, employees, investors and communities to achieve their greatest potential. Our work is the catalyst that helps others achieve their goals. In short, We Enable Possibility℠.

Job Summary

The Manager, IT Governance, Risk & Compliance (GRC) supports the Arch Global Mortgage business by executing governance, risk, and compliance activities related to technology, security, and regulatory obligations. This role serves as a primary execution and coordination point between Arch Global Mortgage stakeholders, Arch technology and security teams, customers, and regulators.

The position focuses on intake, analysis, coordination, and drafting of Arch Global Mortgage‑related materials, working in close partnership with the VP, Chief Information Security Officer.

Work Arrangement: This is a fully remote U.S.-based role. Candidates located on the U.S. West Coast are strongly preferred, as the position requires regular overlap with both U.S. stakeholders and the Arch Global Mortgage team in Sydney, Australia.

Key Responsibilities

Request Intake & Coordination

  • Serve as a primary point of contact for Arch Global Mortgage originating requests related to technology risk, security controls, customer audits, and regulatory inquiries.

  • Interface with international Arch Global Mortgage stakeholders to understand regulatory, customer, and business drivers.

  • Triage incoming requests, identify appropriate subject‑matter experts, coordinate inputs, and track responses to completion.

Governance, Risk & Compliance Execution

  • Draft and prepare regulatory responses, customer communications, and supporting materials for review, refinement, and approval by the CISO.

  • Develop background analysis, control narratives, and documentation used to support external responses.

  • Create and maintain regulatory‑to‑control mappings demonstrating alignment between Arch Global Mortgage requirements and Arch technology and security controls.

  • Interpret Arch policies, standards, and control frameworks for Arch Global Mortgage‑specific use cases and escalate gaps or ambiguities.

  • All external regulatory or customer responses are routed through senior leadership rather than independently positioned, particularly during the first 18–24 months.

SOC 2 & Customer Audit Support

  • Support relevant SOC 2 engagements and other audit activities by coordinating evidence collection, drafting control descriptions and response inputs, and managing requests from auditors and internal teams

  • This role contributes to execution and preparation but does not independently own audit positioning or conclusions.

Business Continuity & Disaster Recovery

  • Maintain working familiarity with business continuity and disaster recovery (BC/DR) concepts relevant to Arch Global Mortgage.

  • Support BC/DR governance activities, documentation updates, testing preparation, and related audit, customer, or regulatory requests.

Operational Rhythm & Leadership Enablement

  • Partner with the CISO to establish and maintain a calendar of recurring Arch Global Mortgage governance, compliance, and reporting activities.

  • Draft metrics, summaries, and artifacts used for senior leadership discussions and board or committee materials.

  • Surface risks, control gaps, and areas of uncertainty clearly and promptly to support prioritization decisions.

Qualifications & Experience

  • Experience in IT governance, risk, compliance, or security risk management within financial services or insurance.

  • Experience working with global or non‑U.S. regulated businesses strongly preferred.

  • Experience supporting customer audits and third‑party risk management (TPRM) programs, particularly with banks or large financial institutions.

  • Prior technical background sufficient to understand, assess, and question technology and security controls.

  • Strong written communication skills, with experience drafting materials intended for external review.

  • Familiarity with SOC 2 and BC/DR concepts required (ownership experience not required).

  • Ability to work across time zones; U.S. West Coast preferred but negotiable, with willingness to overlap with Australian (Sydney) business hours.

What Success Looks Like

  • Becomes a trusted execution partner to the CISO and a reliable liaison for Arch Global Mortgage stakeholders.

  • Regulatory, customer, and audit requests are handled consistently and efficiently.

  • High‑quality drafts and supporting materials reduce preparation burden on senior leadership.

  • Risks and uncertainties are surfaced early, improving predictability and confidence in external engagements.

Requred Education & Experience: 

Required knowledge & skills would typically be acquired through a Bachelors degree plus 5+ working in IT Audit/ IT Compliance related experience or equivalent combination of education and experience.  

Working Conditions/Environment & Physical Demands: 

1. Normal office environment  The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this Job. Reasonable accommodations will be made to enable qualified individuals with disabilities to perform the essential functions of the Job.  

2. Attendance/Punctuality – Is consistently at work and on time; Ensures work responsibilities are covered when absent. 

3. Fully remote

 

Disclaimer 

Incumbent may be asked to perform other duties as required. 

#LI-Remote
#LI-ZP1

For individuals assigned or hired to work in the location(s) indicated below, the base salary range is provided. Range is as of the time of posting. Position is incentive eligible.

$120,000 - $200,000/year

  • Total individual compensation (base salary, short & long-term incentives) offered will take into account a number of factors including but not limited to geographic location, scope & responsibilities of the role, qualifications, talent availability & specialization as well as business needs. The above pay range may be modified in the future.

  • Arch is committed to helping employees succeed through our comprehensive benefits package that includes multiple medical plans plus dental, vision and prescription drug coverage; a competitive 401k with generous matching; PTO beginning at 20 days per year; up to 12 paid company holidays per year plus 2 paid days of Volunteer Time Offer; basic Life and AD&D Insurance as well as Short and Long-Term Disability; Paid Parental Leave of up to 10 weeks; Student Loan Assistance and Tuition Reimbursement, Backup Child and Elder Care; and more. Click here to learn more on available benefits.

     

Do you like solving complex business problems, working with talented colleagues and have an innovative mindset? Arch may be a great fit for you. If this job isn’t the right fit but you’re interested in working for Arch, create a job alert! Simply create an account and opt in to receive emails when we have job openings that meet your criteria. Join our talent community to share your preferences directly with Arch’s Talent Acquisition team.

10200 Arch Capital Services LLC