GRC Manager

Baseten

. Translate regulatory, framework, and customer requirements into product requirements and technical controls .

Posted 10/8/2026full-timeSan Francisco • California • United StatesMid-LevelSenior💰 $150,000 - $250,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security compliance and governance, with a strong focus on SOC 2, ISO 27001, and risk management. Proven ability to translate regulatory requirements into actionable product controls while collaborating with cross-functional teams.

Highest-signal resume keywords

Security Compliance ManagementRisk Assessment Program ManagementSOC 2 ComplianceISO 27001 CertificationCross-Functional Collaboration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security FrameworksRegulatory Requirements TranslationCompliance Audits ManagementTechnical Controls ImplementationGovernance Framework Design

Soft Skills

Stakeholder EngagementProject ManagementTraining DevelopmentAdaptability in Fast-Paced Environments

Industry Keywords

GRCInformation SecuritySaaSCloud-Native EnvironmentVendor Security Assessments

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Translate regulatory, framework, and customer requirements into product requirements and technical controls
Partner with Engineering and Product to build compliance into platform design and development
Design, implement, and maintain security governance frameworks, policies, and procedures
Build and manage the company-wide risk assessment program
Support compliance with SOC 2, ISO 27001/27701, HIPAA, FedRAMP, and other applicable standards and regulations
Coordinate external audits and certification processes, including evidence collection, control validation, and remediation plans
Oversee vendor security assessments and third-party risk management
Embed compliance and risk management into day-to-day operations and technical processes
Support customer security questionnaires, due diligence efforts, and documentation requests
Develop and deliver security and compliance training
Monitor evolving regulatory requirements and lead continuous-improvement initiatives

Requirements

What you’ll need

BS Degree in CS, CE, MIS or equivalent field
5+ years of experience in GRC, Security Compliance, or Information Security roles, ideally in a SaaS or cloud-native environment
Strong understanding of security frameworks and standards such as SOC 2, ISO 27001, NIST, and GDPR
Proven track record managing compliance audits and certification programs end-to-end
Experience working directly with leaders and executives within Enterprise organizations
Experience working cross-functionally with technical and non-technical stakeholders to implement compliance and security controls
Proven experience driving product compliance by translating regulatory and customer requirements into actionable product controls with Engineering and Product
Experience defining project requirements and driving implementation by translating compliance objectives into clear deliverables, coordinating cross-functional stakeholders, and managing execution through completion
Experience responding to customer security questionnaires and leading customer security interviews
Ability to thrive in a fast-paced, high-growth startup environment while maintaining structure and process discipline

Benefits

Comp & perks

Competitive compensation, including meaningful equity
(U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents
Flexible PTO policy including company wide Winter Break
Paid parental leave
Fertility and family-building stipend through Carrot
(U.S. only) Company-facilitated 401(k)
Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities