GRC Manager

Join Baseten, a fast-growing startup, as a GRC Manager. In this role, you will build and enhance our security governance, compliance, and privacy programs. You will work closely with various teams to define compliance requirements, assess platform capabilities, and drive implementation. Additionally, you will contribute to Baseten's broader GRC program, including governance, risk management, audits, vendor assessments, and security awareness. Enjoy a remote-first work environment, unlimited PTO, full healthcare coverage, and a learning and development budget.

• Construire, soutenir et améliorer continuellement les programmes de gouvernance, de conformité et de confidentialité de la sécurité de Baseten.
• Travailler en étroite collaboration avec les équipes d'ingénierie, de produit, de sécurité et juridique pour définir les exigences de conformité et évaluer les capacités de la plateforme.
• Contribuer au programme GRC plus large de Baseten, y compris la gouvernance, la gestion des risques, les audits, les évaluations des fournisseurs et la sensibilisation à la sécurité.

• Strong understanding of security frameworks and standards such as SOC 2, ISO 27001, NIST, and GDPR
• Proven track record managing compliance audits and certification programs end-to-end
• Ability to thrive in a fast-paced, high-growth startup environment while maintaining structure and process discipline
• Proven experience driving product compliance by translating regulatory and customer requirements into actionable product controls with Engineering and Product
• Experience responding to customer security questionnaires and leading customer security interviews, with the ability to clearly communicate security controls, compliance posture, and risk management practices to technical and nontechnical audiences
• BS Degree in CS, CE, MIS or equivalent field
• Experience defining project requirements and driving implementation by translating compliance objectives into clear deliverables, coordinating cross-functional stakeholders, and managing execution through completion
• 5+ years of experience in GRC, Security Compliance, or Information Security roles, ideally in a SaaS or cloud-native environment
• Experience working cross-functionally with technical and non-technical stakeholders to implement compliance and security controls
• Experience working directly with leaders and executives within Enterprise organizations
• Relevant certifications (e.g., CISA, CISSP, CISM, ISO 27001 Lead Implementer)
• Previous experience building and implementing security controls in an early-stage or rapidly growing startup
• Hands-on experience using GRC tools (e.g., Vanta, Drata, Secureframe, Anecdotes)
• Understanding of AI/ML security considerations, data privacy, and model governance
• Experience with cloud security compliance in AWS or GCP environments