GRC Manager
Core
Owns G2's day-to-day security compliance and risk program, managing audit obligations, customer trust commitments, and high-volume operational tasks like questionnaires and vendor risk.
Role type
Senior individual-contributor GRC Manager
Builds
Enterprise risk registers, security policy library, audit evidence, and executive dashboards
Domain
B2B SaaS / Cybersecurity Compliance
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
SOC 2 Type II, ISO 27001, NIST CSF, GRC automation platforms, vendor risk management, DSAR workflows, audit cycle management, executive reporting, cross-functional influence
Preferred skills
CISSP, CRISC, CISM, CISA, ISO 27001 certification leadership, procurement-to-GRC integrations, global privacy regulations (GDPR, CCPA, LGPD), GRC budget management
Technologies
Vanta, Drata, OneTrust
Responsibilities
Administer security policy library and annual review cycles; lead customer security questionnaire responses; manage public Trust Center; run third-party/vendor risk management program; manage DSAR intake and fulfillment; support security addendum and contract redlines; maintain enterprise risk registers; lead SOC 2 Type II and ISO 27001 audit cycles; manage GRC tooling and vendor ecosystem; build executive-level dashboards on program health; advise on corrective action plans; partner cross-functionally with Legal, Security, IT, and Sales; identify process automation opportunities.
Seniority
Senior, hands-on IC
