Audit and Compliance Program Manager

Groq, Inc.; San Francisco (CA); Hybrid; USD 187,000 - 252,000; Full time

Job summary

Groq, Inc. is seeking an Audit and Compliance Program Manager to run the audit program across SOC 2 Type II, ISO 27001, and other frameworks from a unified control perspective.

You will manage audit relationships, fieldwork logistics, and evidence readiness within Vanta GRC, acting as the system of record. You will own the IT policy lifecycle and security awareness training, tracking completion as audit evidence and reporting status to security leadership.

Qualifications

• 5+ years in compliance program management and hands-on execution of at least two concurrent framework audits.
• Experience mapping controls across frameworks and administering a GRC platform as a system of record.
• Experience managing external auditors, drafting scope statements for executive review, and coordinating SMEs across stakeholders.
• Experience owning a policy lifecycle and a security awareness training program with audit-grade evidence.
• Big 4 or equivalent audit-firm experience delivering compliance engagements.

Responsibilities

• Run the audit calendar across SOC 2 Type II, ISO 27001:2022 and other frameworks; manage day-to-day auditor relationships, fieldwork logistics and evidence readiness.
• Track audit findings through to closure with owners and dates so findings do not recur between cycles.
• Maintain the control catalogue and framework mapping so one control test produces evidence for every framework it satisfies, and coordinate SME evidence requests so each control is evidenced once per period, not once per framework.
• Maintain Vanta GRC as the system of record: integration coverage, automated evidence, test ownership and documentation within their review cycle.
• Own the IT policy lifecycle (review cadence, approvals, acknowledgements) and the security awareness training program, with completion tracked as audit evidence; report audit status, open findings and evidence coverage to security leadership on a recurring basis.

Skills

Compliance program management

GRC tooling

Audits coordination

Control mapping

External auditors management

Policy lifecycle

Security training

Big 4 experience

Legal background

Tools

Vanta GRC

Job description

Mission

Groq is seeking an Audit and Compliance Program Manager to run the audit program in multiple frameworks. You will keep the control set mapped once so a single test produces evidence for every framework, maintain the GRC tool as the system of record, own Groq's IT policies and security training, and take on audit execution to mature the GRC function from reactive to proactive program.

Location:

This role will be based in one of our three hiring hubs: the Dallas, San Francisco, or New York City area. The person hired for this role must be based in one of these three areas. You’ll have the flexibility to work remotely while we establish our local Groq office, with the expectation that this role will transition to onsite once the office opens.

Responsibilities & opportunities in this role:

• Run the audit calendar across SOC 2 Type II, ISO 27001:2022 and other frameworks; manage day-to-day auditor relationships, fieldwork logistics and evidence readiness.
• Track audit findings through to closure with owners and dates so findings do not recur between cycles.
• Maintain the control catalogue and framework mapping so one control test produces evidence for every framework it satisfies, and coordinate SME evidence requests so each control is evidenced once per period, not once per framework.
• Maintain Vanta GRC as the system of record: integration coverage, automated evidence, test ownership and documentation within their review cycle.
• Own the IT policy lifecycle (review cadence, approvals, acknowledgements) and the security awareness training program, with completion tracked as audit evidence; report audit status, open findings and evidence coverage to security leadership on a recurring basis.

Ideal candidates have/are:

• 5+ years in compliance program management, including hands-on execution of at least two concurrent framework audits.
• Experience mapping controls across frameworks and reducing duplicate evidence collection, and administering a GRC platform as a system of record.
• Experience managing external auditors, drafting scope statements for executive review, and coordinating SMEs across stakeholders.
• Experience owning a policy lifecycle and a security awareness training program, with completion evidence that has stood up in audit.
• Experience at a Big 4 or equivalent audit firm delivering compliance engagements, so you know how auditors scope, sample and write findings.
• Legal background preferred

Why Join Us:

• Purposeful Hiring: You’re not here by accident, and neither is anyone else. Every teammate is handpicked with intention because who we build with matters.
• Builders Wanted: You’re not just riding the rocket ship, you’re building it. Your work directly shapes the trajectory of our company.
• Mission-Driven Work: We’re here to make a real impact. Our mission fuels everything we do.
• Tackling Hard Problems: If easy isn’t your thing, you’re in the right place. We solve some of the most complex and exciting challenges in our space.
• Excellence Is The Standard: High performance isn’t just encouraged, it’s the baseline. And it’s contagious.

Compensation

Groq is committed to providing competitive compensation through our Total Cash philosophy, which incorporates potential bonus value directly into base pay. The total cash salary range for this position, which is inclusive of the potential bonus value, is $186,600 - $252,400, with individual placement determined by your geographic location, experience, skills, and alignment with internal compensation standards. This range is specific to candidates located in the United States. Compensation for international candidates will vary based on local market dynamics. Beyond cash compensation, Groq also offers a Long-Term Incentive (LTI) Program and a robust suite of employee benefits.

#LI-SW1