GRC Manager

4 hours agoLeadSalary: 150K - 250KSan Francisco, USA Hybrid Full Time Cybersecurity Jobs by Baseten

Baseten

Baseten is an AI inference platform for deploying, optimizing, and scaling custom, open-source, and fine-tuned models in production.

Series F+Recently fundedCompany intelligence

San Francisco, United States

Funding history

Series F ($1.5B)Series C ($75M)Series E ($300M)

Investors

Nvidia CapitalG Greylock Partners IVP Scribble Ventures

About Baseten

Baseten provides model runtimes, inference infrastructure, developer workflows, and deployment options including managed cloud, self-hosted, and hybrid environments.

View jobs by Baseten

Skills

Anecdotes Audit Aws Compliance Drata Fedramp Gcp Gdpr Governance Grc Hipaa Iso 27001 Nist Privacy Risk Management Secureframe Security Control Soc 2 Vanta Vendor Assessment

Candidate Availability

Hybrid · San Francisco · Required

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will build and enhance governance, compliance, privacy, and risk programs. You will translate requirements into controls, manage audits and vendor assessments, support customer assurance, develop policies and training, and drive compliance implementation with cross-functional stakeholders.

Requirements

5+ years of experience in GRC, security compliance, or information security
Understanding of SOC 2, ISO 27001, NIST, and GDPR
Experience managing compliance audits and certification programs
Experience implementing compliance and security controls with technical and non-technical stakeholders
Experience translating regulatory and customer requirements into product controls
Experience responding to customer security questionnaires and conducting customer security interviews

Responsibilities

Translate regulatory, framework, and customer requirements into product requirements and technical controls
Design and maintain security governance frameworks, policies, and procedures
Build and manage the risk assessment program
Maintain compliance with applicable standards and regulations
Coordinate audits, evidence collection, control validation, and remediation
Oversee vendor security assessments
Support customer security questionnaires and due diligence
Develop and deliver security and compliance training
Lead continuous improvement of compliance and risk programs

Benefits

Equity
Medical, dental, and vision insurance for U.S. employees and dependents
Flexible PTO
Company-wide Winter Break
Paid parental leave
Fertility and family-building stipend through Carrot
Company-facilitated 401(k) for U.S. employees