GRC Manager

You will operate the day-to-day compliance program, administer Drata, and maintain the SafeBase knowledge base. You will collect evidence, drive compliance training, lead access reviews and risk assessments, maintain audit readiness, address product compliance questions, and turn emerging AI regulations into practical operating controls.

Responsibilities

• Own Drata administration, integrations, test-health monitoring, and manual evidence collection
• Curate the SafeBase knowledge base and escalate customer security questionnaires
• Drive policy acknowledgments, device compliance, and recurring security and compliance training
• Lead user access reviews, penetration tests, BCDR and incident-response tabletops, policy reviews, and risk assessments
• Work with Engineering on data handling and customer compliance commitments
• Maintain audit readiness for SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act
• Translate emerging AI regulation into operational controls
• Partner with HR, Legal, Customer Support, and Finance on compliance processes

Requirements

• Hands-on GRC or compliance experience building and operating programs
• Experience owning at least one SOC 2 audit cycle end to end
• Administration experience with a compliance automation platform
• Technical knowledge of architecture and data flows
• Cross-functional influence
• Ability to work with changing requirements and limited precedent

Benefits

• Equity