GRC Manager

Job Summary

Owning the compliance program day-to-day, the full-time GRC Manager will manage SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act compliance while working remotely and collaborating with various departments to ensure adherence to regulations.

Key responsibilities

• Oversee end-to-end administration of Drata, including integrations and manual evidence collection
• Curate the SafeBase knowledge base for customer security questionnaires and manage personnel compliance training
• Lead recurring compliance ceremonies and maintain audit readiness across multiple regulatory frameworks

Required qualifications

• Several years of hands-on experience in GRC or compliance program management
• Experience owning at least one SOC 2 audit cycle end to end
• Admin-level fluency in a compliance automation platform, preferably Drata
• Technical proficiency to engage with engineering teams on architecture and data flows
• Proven ability to influence cross-functional teams effectively