Program Manager, GRC

Are you passionate about bringing a method to the madness and driving change? Peloton is looking for a bright, adaptable, and hardworking Program Manager with a diverse set of skills who can thrive in a challenging and rewarding environment. 

As a Program Manager, you will drive planning, program management, and project execution of our Technology Governance, Risk, and Compliance (GRC) team. The GRC team drives efforts including SOX and PCI compliance initiatives, NIST CSF framework alignment, business continuity/disaster recovery planning, risk management, and vendor risk management across the company. You will also liaise with partner teams to support shared initiatives. You will have a unique opportunity to support a growing team and help build a company-wide compliance culture.

You are not required to have specific hands-on GRC experience, but you are required to work with Technology GRC and technical staff and manage technical projects related to Technology GRC initiatives. You will apply your skills to correctly capture requirements, plan for dependencies, and make the Technology GRC team more efficient. You know how to apply technology to solve problems. You are both a diplomat and an advocate, and will be trusted to represent the Technology GRC team to stakeholders and partners, internal and external. You will help define goals, measure progress, manage dependencies, and clear blockers.

It will be your responsibility to be relentless in getting things done. As the scrum master, you will help our teams maintain organization while continuing to improve on process and communication. It will be your job to wear multiple hats, and go beyond the normal expectations. 



  • PM Methods
    • Be the Scrum Master, evangelist, and coach for agile practices
    • Drive the teams in aligning with a combination of Agile, Scrum, and Waterfall best practices, including in capacity management and planning
    • Manage sprints and conduct sprint reviews
    • Use Jira to manage the team’s work, using a combination of kanban, sprints, and waterfall workflows
    • Help create self-organized teams that drive continuous improvement to our systems and service reliability
    • Engage in service capacity planning and demand forecasting for the team’s workload
    • Facilitate development and execution of the Technology GRC program roadmap
  • Program Governance and Leadership
    • Select appropriately from a variety of PM methods, processes, policies, and procedures and apply to the situation
    • Successfully manage multiple, simultaneous, complex, high-visibility programs and projects in a portfolio
    • Develop and maintain a program management strategy which encompasses planning, development, monitoring, control, and execution
    • Recognize opportunities for improvements/adjustments and effectively implements
    • Facilitate decision-making by gathering and making information available, identifying and engaging the appropriate stakeholders, and driving and focusing discussion
    • Identify, assess, and manage risks; manage the risks, not just the risk list
    • Define programs or projects by gathering requirements and clear acceptance criteria/definitions of done
    • Manage scope and evaluate priorities to efficiently balance resources
    • Lead programs and workstreams through influence, competence, and results, and not through people leadership, to create a culture of shared goals and shared direction
  • Relationship Management, Communication, Statusing, and Reporting
    • Develop and maintain a stakeholder management plan for individuals/teams within and outside the team and/or program
    • Drive process creation and cross-team collaboration
    • Understand, manage, communicate, and report key program information, including status, schedule, milestones, risk, dependencies, major changes, and major decisions
    • Develop and maintain a statusing and reporting process and cadence which accounts for communication to various stakeholder levels and for various purposes
    • Plans and facilitates effective meetings tailoring approach to the objective of the meeting (eg stakeholder program review vs sprint planning session), and developing solid artifacts
    • Help build consensus between teams
    • Liaise with vendors or suppliers
  • Effectiveness
    • Coordinate and help come up with solutions, and remove impediments
    • Develop and demonstrate broad knowledge of Technology GRC initiatives
    • Support change management processes
    • Solicit feedback from end users to confirm solutions are appropriate and effective
    • Recognize, adopt and instill good compliance practices throughout the organization 
    • Exercise risk-based judgment, and help teams make the right compliance calls 


  • Experience in Agile / Scrum methodologies, including managing execution through sprints, retrospectives, backlog grooming, etc.,Strong understanding of story points and Agile estimation systems
  • Experience administering Jira for the purpose of leveraging and modifying Jira boards, workflows, and forms, as well as other features, to enable Jira to better support the team
  • Experience tracking policy/procedure creation and update cycles
  • Experience with capacity planning
  • Experience gathering requirements and soliciting clear acceptance criteria
  • Strong track record of project delivery and benefits realization
  • Experience in strategic planning and analysis
  • Excellent presentation and meeting facilitation skills, which will be used to host program reviews and stakeholder status meetings at all levels
  • Skilled in developing effective partnership relationships with portfolio stakeholders
  • 5+ years project management experience related to technology risk management, compliance or information security
  • Basic understanding of software engineering and technical infrastructure
  • Energetic team player with excellent written, verbal, and conceptual skills
  • Strong interpersonal communication, problem solving, negotiation, and organizational skills
  • Self-starter / self-motivated, capable of staying on track and pursuing solutions without supervision
  • Determined to deliver outcomes and able to overcome obstacles in order to move forward. Accountable for the delivery of outcomes, strives to meet and exceed expectations
  • Has a flexible (whether proactive or reactive, as the situation requires) approach to change, is able to work effectively in a variety of situations, constantly seeks improvements, and is forward looking
  • Strong analytical, problem solving and planning ability
  • Works well in a fast-paced environment
  • Experience in defining, implementing and coaching others in technical Project Management methodologies and tactics

 Nice to have:

  • 4 years contextual GRC experience, including SOX and/or PCI controls (or other control sets, such as NIST CSF), technology risk management, vendor risk management, etc. 
  • Certified Scrum Master
  • Expert in JIRA administration



Founded in 2012, Peloton has transformed the at-home fitness experience by creating a bike that merges high-design with modern technology to provide access to live streaming and on demand indoor cycling classes led by elite instructors. With a state of the art studio, the best instructors and content distribution, Peloton delivers an intense high-energy workout that motivates, while positively changing the mind and body.

Back to top