GRC & Compliance Leader for AI Security

Baseten; New York (NY); On-site; USD 150,000 - 250,000; Full time

Benefits offered by this job

Competitive compensation

Medical, dental, vision insurance

Flexible PTO

Parental leave

Fertility stipend

401(k)

Learning opportunities

Job summary

Baseten in New York is seeking an experienced GRC Manager to build and enhance security governance, risk, and privacy programs across the platform. You will design policies, manage audits, and implement controls aligned with SOC 2, ISO 27001, ISO 27701, and FedRAMP.

You'll collaborate with engineering, legal, and product teams to scale risk management, support customer assurance, and ensure Baseten stays at the forefront of privacy and regulatory compliance as we grow.

Qualifications

• 5+ years of experience in GRC, Security Compliance, or Information Security roles.
• Strong understanding of security frameworks such as SOC 2, ISO 27001, NIST, and GDPR.
• Proven track record managing compliance audits and certification programs end-to-end.
• Experience with access management concepts and third-party risk.
• Experience cross-functionally with technical and non-technical stakeholders.
• Excellent organizational, documentation, and communication skills.
• Ability to thrive in a fast-paced startup environment with process discipline.

Responsibilities

• Governance & policy design, implementation, and maintenance of security governance frameworks.
• Manage company-wide risk assessment program, tracking and mitigating risks.
• Lead compliance operations for SOC 2, ISO 27001/27701, HIPAA, FedRAMP and more.
• Coordinate external audits and certification processes with evidence collection and remediation.
• Oversee third-party vendor security assessments and risk management.
• Partner with Engineering, Product, and Operations to embed compliance into operations.

Skills

Security frameworks

Audits & certifications

Third-party risk

Cross-functional collaboration

Documentation & policy design

Communication skills

Attention to detail

Regulatory knowledge

Tools

GRC tools

Job description

Baseten in New York is seeking an experienced GRC Manager to build and enhance security governance, risk, and privacy programs across the platform. You will design policies, manage audits, and implement controls aligned with SOC 2, ISO 27001, ISO 27701, and FedRAMP.

You'll collaborate with engineering, legal, and product teams to scale risk management, support customer assurance, and ensure Baseten stays at the forefront of privacy and regulatory compliance as we grow.