GRC Manager
BasetenAI model company
San FranciscoSenior
IVP
CapitalG
NVIDIA
First Round Capital
Sequoia
Premji Invest
Legal & Compliance
About the role
TL;DR
Seeking a GRC Manager to enhance Baseten’s security governance and compliance programs.
- •We are seeking an experienced GRC Manager to build, support, and enhance Baseten’s security governance, compliance, and privacy programs.
- •Key Responsibilities Governance & Policy Development: Design, implement, and maintain security governance frameworks, policies, and procedures.
- •Risk Management: Build and manage the company-wide risk assessment program.
- •Compliance Operations: Lead efforts to achieve and maintain compliance with SOC 2, ISO 27001/27701, HIPAA, FedRAMP and other applicable standards and regulations.
- •Third-Party Risk Management: Oversee vendor security assessments and ensure third-party providers meet Baseten’s security and compliance standards.
- •Customer Trust & Assurance: Support customer security questionnaires, due diligence efforts, and documentation requests.
- •Requirements 5+ years of experience in GRC, Security Compliance, or Information Security roles, ideally in a SaaS or cloud-native environment.
- •Strong understanding of security frameworks and standards such as SOC 2, ISO 27001, NIST, and GDPR.
- •Proven track record managing compliance audits and certification programs end-to-end.
- •Excellent organizational, documentation, and communication skills with attention to detail.
- •Ability to thrive in a fast-paced, high-growth startup environment while maintaining structure and process discipline.
Required skills
SOC 2GDPRRisk ManagementCompliance Management
Domain expertise
ai
Benefits & perks
Competitive compensation, including meaningful equity, 100% coverage of medical, dental, and vision insurance for employee and dependents, Flexible PTO policy including company wide Winter Break, Paid parental leave, Fertility and family-building stipend through Carrot, Company-facilitated 401(k)
Tech stack
SOC 2HIPAA
