GRC Manager​/SOC​/Onsite in Vienna, VA

A high‑growth technology startup in Vienna, VA is seeking a GRC Manager to build and lead its compliance program end‑to‑end. They are looking for someone who can work onsite in Vienna.

• Own and lead the organization’s compliance program, ensuring it is audit‑ready and deeply embedded into operations.
• Build scalable frameworks for SOC 2, ISO 27001, GDPR, and FedRAMP.
• Lead SOC 2 audits, from preparation to completion, and maintain the IT risk register.
• Work at the intersection of engineering, infrastructure, legal, and operations to align compliance with business objectives.

• 3–5 years of experience in GRC, compliance, or IT audit, ideally within a SaaS or highly technical environment
• Proven, hands‑on experience leading SOC 2 audits (direct ownership, not advisory roles)
• Strong ability to understand and engage with complex technical architecture, including non‑standard environments
• Background in SRE, security engineering, engineering, or a related technical field (education and/or experience)
• Experience working with AWS and/or GCP, as well as Infrastructure as Code (IaC) environments
• Strong written communication skills, including the ability to author policies and customer‑facing documentation
• Ability to operate effectively in fast‑paced, high‑growth environments
• Familiarity with ISO 27001, GDPR, and/or FedRAMP frameworks
• Experience supporting Legal in security‑related contract negotiations and DPAs
• Professional certifications such as CISA, CISSP, CISM, CCSK, or similar

• Medical, Dental, and Vision Insurance
• Generous Vacation Time
• Company equity
• Bonus eligible

Applicants must be currently authorized to work in the US on a full‑time basis now and in the future.