GRC Manager

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $139.3k - $168.3k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Mattermost

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

💼 Consulting

🎖️ Defense

📦 Logistics

💰 $50M Series B - Mattermost on 2019-06

Consulting • Defense • Logistics

Mattermost is a secure, purpose-built collaboration and communication platform for enterprises, governments, and mission-critical operations. It provides self-hosted and cloud-neutral deployment options (on-premises, private cloud, air-gapped) and focuses on ChatOps, DevSecOps, integrated playbooks, and out-of-band incident response to accelerate detection, response, and remediation. Mattermost emphasizes data control, compliance, and resilience for regulated and critical-infrastructure environments, integrating with existing tools and supporting secure workflows and AI integrations.

📋 Description

• Own and modernize Mattermost's compliance programs across federal and commercial markets • Lead readiness, certification, and surveillance cycles across both programs • Operate the risk management program end to end, from identification and assessment through treatment and acceptance • Own the third-party and vendor risk management program, including security assessments and supply chain risk • Apply GRC engineering and automation to replace manual evidence collection with continuous controls monitoring • Build AI-native workflows to accelerate and improve recurring compliance work • Maintain the control library, system security plans, POA&Ms, and policies • Coordinate external audits from scoping through remediation • Own customer security questionnaires, trust center content, and reusable compliance artifacts to accelerate deal cycles • Grow and lead the GRC team as the program scales • Deliver a CMMC Level 2 gap assessment and readiness roadmap within the first 90 days • Complete SOC 2 Type II and ISO 27001 audit cycles on time • Maintain customer security questionnaires and trust center content to unblock deal cycles • Build a scalable, program-driven GRC function

🎯 Requirements

• Bachelor's degree in computer science, information security, or related field — or significant professional GRC and compliance experience • Proven senior-level experience in governance, risk, and compliance, security compliance, or IT audit, including direct ownership of a certification or authorization program • Experience with U.S. Federal standards including CMMC and NIST series (800-171 / 800-53) • Experience with ISO 27001 and SOC 2 Type II • Experience operating a formal risk management program • Experience running a third-party and vendor risk management program • Experience owning customer-facing security assurance, including security questionnaires and trust center content • Working knowledge of security controls for cloud environments (AWS, GCP, and/or Azure) • Excellent written and verbal communication skills • Candidates must meet federal eligibility requirements to be considered • Applicants must meet eligibility requirements for access to export-controlled information under U.S. export control laws, including EAR and ITAR • Role may require obtaining and maintaining a U.S. government security clearance • Nice-to-have: Professional GRC certifications such as CISA, CRISC, CISM, CISSP, or CIPP • Nice-to-have: Experience with AI platforms such as Claude, OpenAI, or Gemini • Nice-to-have: Experience with compliance automation tooling such as Vanta or Drata, and continuous controls monitoring • Nice-to-have: Direct experience applying AI or LLM-based workflows to GRC tasks • Nice-to-have: Proficiency in no-code automation or scripting languages • Nice-to-have: Past success in critical infrastructure industries including defense, cybersecurity, communications, or manufacturing

🏖️ Benefits

• Remote-first work environment • Medical coverage • Dental coverage • Vision coverage • Unlimited PTO • Company holidays • Work from home stipend • Annual learning and development budget for conferences, certifications, and courses • Paid parental leave for all parents • 401(k) plan • Mission-driven work • Open-source developer community • AI-forward environment • Globally distributed, high-trust team built for autonomy and ownership

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume