AI-Powered GRC Lead for Federal & Commercial Compliance

Mattermost; Oregon; Hybrid; USD 139,000 - 168,000; Full time

Benefits offered by this job

Remote-first culture

Unlimited PTO

Work from home stipend

Learning and development budget

Parental leave

Job summary

Mattermost, a leading remote-first collaboration platform, seeks a GRC Manager to own and modernize governance, risk, and compliance across federal and commercial markets. You will drive automation, AI-native processes, and coordination across engineering, IT, and auditors to ensure federal readiness and certifications.

You will lead hands-on compliance work while growing the team and aligning with business goals, with a focus on scalable controls and continuous improvement across our security

Qualifications

• GRC leadership experience and a track record delivering compliance programs.
• Strong knowledge of federal and commercial compliance standards.
• Experience owning certification/authorization programs and audits.

Responsibilities

• Own and modernize Mattermost's compliance programs for federal and commercial markets.
• Lead readiness, certification, and surveillance cycles across programs.
• Operate end-to-end risk management from identification to treatment and acceptance.
• Own third‑party and vendor risk management, including security assessments.
• Apply GRC engineering and automation to reduce manual evidence collection.
• Build AI‑native workflows to accelerate recurring compliance work.
• Maintain control libraries, system security plans, POA&Ms, and policies.
• Coordinate external audits from scoping to remediation.
• Accelerate deal cycles with customer security questionnaires and trust content.
• Grow and lead the GRC team as the program scales.

Skills

GRC leadership

Governance

Risk management

Regulatory compliance

Security controls

Audit readiness

Communication skills

Education

Bachelor’s degree in CS/IS or equivalent

Tools

Vanta

Drata

AI platforms

Job description

Mattermost, a leading remote-first collaboration platform, seeks a GRC Manager to own and modernize governance, risk, and compliance across federal and commercial markets. You will drive automation, AI-native processes, and coordination across engineering, IT, and auditors to ensure federal readiness and certifications.

You will lead hands-on compliance work while growing the team and aligning with business goals, with a focus on scalable controls and continuous improvement across our security