GRC & Audit Program Lead (Hybrid)

Superhuman; San Francisco (CA); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health care

Disability and life insurance

401(k) matching

Paid parental leave

Paid time off

Holidays and floating holidays

Sick time

Stipends and home office

Job summary

Superhuman is seeking a Program Manager to lead its unified audit program across SOC 2, ISO 27001, ISO 42001, and related certifications. You will work with GRC Partners, control owners, audit firms, and leadership to expand to new frameworks, platforms, and regions.

You will build the audit operating model and runbook, drive automation of evidence collection, and coordinate with cross-functional teams to deliver findings with clear remediation steps.

Qualifications

• 5+ years of program management experience running multi-workstream programs with plans, milestones, dependencies, risk tracking, and leadership reporting.

Responsibilities

• Run the audit program with an integrated plan and calendar across audits and expansions, tracking milestones, risks, dependencies, and decisions.
• Plan and run quarterly audits from scoping to closeout, including fieldwork readiness and control-owner prep.
• Coordinate with Product and Engineering to scope audit boundaries and flag scope changes.
• Build and maintain the audit operating model and runbook, expanding as the program grows.
• Drive automation of evidence collection, tracking, and reporting, collaborating with GRC Engineering.
• Partner with GRC and Procurement on third-party risk management across the vendor lifecycle.
• Align audit windows across frameworks to minimize duplicate evidence requests.
• Plan new audits and expansions; conduct framework evaluations and gap assessments for leadership.
• Coordinate with control owners and GRC Partners to deliver evidence and close findings.
• Manage day-to-day auditor relationships and report status to GRC leadership.

Skills

Program management

External security audits

SOC 2 knowledge

ISO 27000 family

ISO 42001

PCI-DSS familiarity

Cross-functional leadership

AI tooling / automation

Job description

Superhuman is seeking a Program Manager to lead its unified audit program across SOC 2, ISO 27001, ISO 42001, and related certifications. You will work with GRC Partners, control owners, audit firms, and leadership to expand to new frameworks, platforms, and regions.

You will build the audit operating model and runbook, drive automation of evidence collection, and coordinate with cross-functional teams to deliver findings with clear remediation steps.