GRC Manager

Vaga não está no LinkedIn

🕒 Outubro 31

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $139.254 - $168.318 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🚔 Conformidade

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 10 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

Mattermost

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2016

💼 Consultoria

🎖️ Defesa

📦 Logística

💰 $50.000.000 Series B - Mattermost em 2019-06

Consulting • Defense • Logistics

A Mattermost é uma plataforma segura de colaboração e comunicação, desenvolvida especificamente para empresas, governos e operações de missão crítica. Oferece opções de deployment self-hosted e cloud-neutral (on-premises, private cloud e air-gapped) e concentra-se em ChatOps, DevSecOps, playbooks integrados e resposta a incidentes out-of-band para acelerar a detecção, a resposta e a remediação. A Mattermost prioriza o controle de dados, a conformidade e a resiliência em ambientes regulados e de infraestrutura crítica, integrando-se às ferramentas existentes e oferecendo suporte a workflows seguros e integrações de IA.

Descrição

• Own and modernize Mattermost's compliance programs across federal and commercial markets • Lead readiness, certification, and surveillance cycles across both programs • Operate the risk management program end to end, from identification and assessment through treatment and acceptance • Own the third-party and vendor risk management program, including security assessments and supply chain risk • Apply GRC engineering and automation to replace manual evidence collection with continuous controls monitoring • Build AI-native workflows to accelerate and improve recurring compliance work • Maintain the control library, system security plans, POA&Ms, and policies • Coordinate external audits from scoping through remediation • Own customer security questionnaires, trust center content, and reusable compliance artifacts to accelerate deal cycles • Grow and lead the GRC team as the program scales • Deliver a CMMC Level 2 gap assessment and readiness roadmap within the first 90 days • Complete SOC 2 Type II and ISO 27001 audit cycles on time • Maintain customer security questionnaires and trust center content to unblock deal cycles • Build a scalable, program-driven GRC function

🎯 Requisitos

• Bachelor's degree in computer science, information security, or related field — or significant professional GRC and compliance experience • Proven senior-level experience in governance, risk, and compliance, security compliance, or IT audit, including direct ownership of a certification or authorization program • Experience with U.S. Federal standards including CMMC and NIST series (800-171 / 800-53) • Experience with ISO 27001 and SOC 2 Type II • Experience operating a formal risk management program • Experience running a third-party and vendor risk management program • Experience owning customer-facing security assurance, including security questionnaires and trust center content • Working knowledge of security controls for cloud environments (AWS, GCP, and/or Azure) • Excellent written and verbal communication skills • Candidates must meet federal eligibility requirements to be considered • Applicants must meet eligibility requirements for access to export-controlled information under U.S. export control laws, including EAR and ITAR • Role may require obtaining and maintaining a U.S. government security clearance • Nice-to-have: Professional GRC certifications such as CISA, CRISC, CISM, CISSP, or CIPP • Nice-to-have: Experience with AI platforms such as Claude, OpenAI, or Gemini • Nice-to-have: Experience with compliance automation tooling such as Vanta or Drata, and continuous controls monitoring • Nice-to-have: Direct experience applying AI or LLM-based workflows to GRC tasks • Nice-to-have: Proficiency in no-code automation or scripting languages • Nice-to-have: Past success in critical infrastructure industries including defense, cybersecurity, communications, or manufacturing

🏖️ Benefícios

• Remote-first work environment • Medical coverage • Dental coverage • Vision coverage • Unlimited PTO • Company holidays • Work from home stipend • Annual learning and development budget for conferences, certifications, and courses • Paid parental leave for all parents • 401(k) plan • Mission-driven work • Open-source developer community • AI-forward environment • Globally distributed, high-trust team built for autonomy and ownership

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo