GRC Manager

Operations
· San Francisco
· Remote
· Full Time
· Senior level

This role builds and runs the security governance, risk, and compliance program at an early stage security team. A big part of the job is turning regulations and customer demands into concrete product controls with Engineering and Product, then running audits and certifications from start to finish. A strong candidate has 5 or more years in GRC at a SaaS or cloud company, knows SOC 2, ISO 27001, NIST, and GDPR well, and can speak clearly to both technical staff and enterprise leaders.

AI tools can speed up evidence collection, questionnaire answers, policy drafts, and vendor reviews, so routine paperwork takes less time. What stays human is judging real risk, deciding what a control should look like in a product, and earning trust in customer conversations. Since the platform serves AI companies running models in production, the rules around data privacy and model handling are still taking shape, and this role helps decide how they apply.

Working at an inference platform means seeing firsthand how customer models and data move through cloud infrastructure, and what controls fit that setup. Someone in this role would learn how AI security and privacy questions come up with AI company customers and turn them into product requirements. To build this before applying, read up on AI and ML security guidance, practice mapping a framework to an AI deployment, and try GRC automation tools on a small project.

• End to end audit management
• SOC 2 and ISO 27001
• Turning requirements into product controls
• Customer security questionnaires and interviews
• AI and ML security awareness

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

High-performance cloud inference platform for deploying, serving, and scaling open-source and custom artificial intelligence models.