Information Security and GRC Manager
Core
Hands-on owner of day-to-day security and compliance work, running SOC 2 programs, handling enterprise security reviews, and driving remediation with Engineering.
Role type
Senior IC Information Security and GRC Manager
Builds
SOC 2 compliance program, customer security documentation, and internal security operations
Domain
SaaS / Information Security / GRC
Required skills
SOC 2 Type II audit execution, enterprise security review management, risk register maintenance, GRC automation platform usage, cloud security knowledge, identity and access management, vulnerability management, incident response readiness
Preferred skills
CISSP, CISM, or CISA certification, ISO 27001, HIPAA, FERPA, EU AI Act, ISO 42001 experience
Technologies
Vanta, Drata, Secureframe
Responsibilities
Run SOC 2 program end to end including control ownership and auditor management; Own customer security reviews and maintain trust center; Provide technical input on security commitments in customer contracts; Maintain risk register and security policies; Turn audit findings into concrete engineering work; Operate core internal security programs including access reviews and vulnerability management
Seniority
Senior, hands-on IC