Senior GRC Program Manager

span 400; At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs. span 400; If you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value. THE WORK: Ripple is expanding its Information Security function and seeking experienced professionals to join us in building a world-class program. This is a critical role based in our Luxembourg entity, integral to strengthening our local operational presence and governance. As Ripple continues to grow its regulated activities in Europe, this position will be instrumental in ensuring robust ICT operations and security practices on the ground. The successful candidate will lead ICT operations initiatives in Luxembourg, acting as the bridge between global engineering teams and local regulatory execution in the dynamic digital asset space. WHAT YOU’LL DO: Ensure the operational implementation and maintenance of EU / Luxembourg security frameworks, including the Digital Operational Resilience Act (DORA) and supporting technical standards. Lead the day-to-day management and operational oversight of outsourced ICT and security services (provided by related entities within the Ripple Group or third parties), ensuring service delivery meets local regulatory standards and SLAs. Actively engage with global Engineering and IT teams to track and evaluate future infrastructure, application, and architectural changes, ensuring they are designed with operational resilience and regional compliance in mind. Coordinate the implementation of technical security controls across our infrastructure and application environments, ensuring alignment with Ripple’s internal controls and regulatory guidelines (e.g., EBA, ESMA, CSSF). Collaborate with global InfoSec teams to develop, maintain, and localize InfoSec Policies, Standards, and Procedures relevant to EU compliance. Directly access systems to pull technical evidence, such as logs, system settings, and access reports, to support continuous operational monitoring, incident response, and compliance efforts.