GRC Manager

Job not on LinkedIn

🕒 3 days ago

🇺🇸 United States – Remote

💵 $175k - $205k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OpenRouter

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2023

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

Consulting • Marketing • Artificial Intelligence

OpenRouter is a platform providing a unified interface for interacting with various large language models (LLMs). It focuses on delivering better prices and uptime without the need for subscriptions. The platform supports multiple AI tasks and showcases models like Mistral Small 3 and DeepSeek R1 Distill Qwen 32B, which are designed for fast performance and high accuracy. OpenRouter also features gaming and coding tools that enhance usability across different sectors such as marketing, finance, and education.

📋 Description

• Own Drata end to end, including administration, integrations, test-health monitoring, and manual evidence collection • Curate the SafeBase knowledge base so sales can self-serve customer security questionnaires and handle escalations • Drive personnel compliance, including policy acknowledgments, device compliance, and recurring security and compliance training • Lead user access reviews, penetration tests, BCDR and incident response tabletops, annual policy reviews and updates, and risk assessments • Work directly with Engineering on product-related compliance questions involving data handling and customer commitments • Maintain audit readiness across SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act • Translate emerging AI regulation into operational controls • Partner with HR, Legal, Customer Support, and Finance to integrate compliance into existing workflows • Report to the Head of IT & Security and run the program with very little daily management

🎯 Requirements

• Several years in GRC or compliance, hands-on — built and run programs, not just governed them • At least one SOC 2 audit cycle owned end to end, evidence through fieldwork • Admin-level fluency in a compliance automation platform; Drata strongly preferred • Technical enough to hold a real conversation with engineers about architecture and data flows • Proven cross-functional influence • Comfortable when requirements shift and precedent doesn't exist • Nice to have: PCI DSS in a startup environment • Nice to have: HIPAA as a Business Associate • Nice to have: EU AI Act or other emerging AI regulation • Nice to have: CISA, CISSP, or CIPP • Nice to have: First compliance hire experience • Nice to have: Scripting for evidence collection

🏖️ Benefits

• Equity • Remote work (US)