CareerPlanSign in

GRC Program Manager, Assurance Engineering & Control Systems

San Francisco💼 Full-time🗓 2026-08-06 → 2026-09-25

Core

Own consequential audits and build a reusable common control framework to make controls provable and audit readiness a result of well-designed systems.

Role type

Senior IC GRC Program Manager (Assurance Engineering)

Builds

A common control framework linking risk, control intent, implementation, owner, system, environment, evidence, and applicable frameworks.

Domain

AI Safety & Governance (GRC, Security, Compliance)

Deliverable

production ML models | product features | dashboards & analysis

Required skills

Audit ownership, control design, evidence testing, cloud systems fluency, API/SQL/automation, AI-assisted development (Codex), product judgment, cross-functional partnership

Preferred skills

SOC 2, ISO 27001/27017, PCI DSS, NIST, FedRAMP frameworks

Technologies

Codex, SQL, APIs, structured data, automation, cloud systems

Responsibilities

Lead external, internal, customer, and certification audit work from scoping through closeout; Build and maintain a common control framework; Validate actual scope and ownership of controls; Use AI tools to build evidence checks and monitoring; Partner with engineers on architecture and control effectiveness; Design maintainable tools preserving evidence integrity; Define roadmaps and success metrics.

Seniority

Senior, hands-on IC

Sourced via ashby · Listed on CareerPlan, which tracks 70,000+ jobs from 20+ sources.