GRC Manager

present of AI; San Francisco (CA); Remote; USD 180,000 - 260,000; Full time

Job summary

Baseten, a high-performance cloud inference platform, seeks a Senior GRC leader to build and run the security governance, risk, and compliance program for our SF/remote team.

You will translate requirements into concrete product controls with Engineering and Product, lead audits (SOC 2, ISO 27001, NIST, GDPR), and communicate risk to both technical staff and enterprise leaders.

Qualifications

• 5+ years in GRC at a SaaS or cloud company.
• Knowledge of SOC 2, ISO 27001, NIST, and GDPR.
• Ability to present to technical staff and enterprise leaders.

Responsibilities

• Build and run the security governance, risk, and compliance program.
• Translate regulations and customer demands into concrete product controls with Engineering and Product.
• Lead audits and certifications from start to finish.
• Collaborate with Engineering and Product to implement controls.
• Engage with customers and leadership to discuss risk posture and remediation.

Skills

GRC experience

SOC 2

ISO 27001

NIST

GDPR

Enterprise comms

Audits

Job description

Operations · San Francisco · Remote · FullTime · Senior level

This role builds and runs the security governance, risk, and compliance program at an early stage security team. A big part of the job is turning regulations and customer demands into concrete product controls with Engineering and Product, then running audits and certifications from start to finish. A strong candidate has 5 or more years in GRC at a SaaS or cloud company, knows SOC 2, ISO 27001, NIST, and GDPR well, and can speak clearly to both technical staff and enterprise leaders.

How it fits the AI era

AI tools can speed up evidence collection, questionnaire answers, policy drafts, and vendor reviews, so routine paperwork takes less time. What stays human is judging real risk, deciding what a control should look like in a product, and earning trust in customer conversations. Since the platform serves AI companies running models in production, the rules around data privacy and model handling are still taking shape, and this role helps decide how they apply.

How it builds AI experience

Working at an inference platform means seeing firsthand how customer models and data move through cloud infrastructure, and what controls fit that setup. Someone in this role would learn how AI security and privacy questions come up with AI company customers and turn them into product requirements. To build this before applying, read up on AI and ML security guidance, practice mapping a framework to an AI deployment, and try GRC automation tools on a small project.

Worth showing

• End to end audit management
• SOC 2 and ISO 27001
• Turning requirements into product controls
• Customer security questionnaires and interviews
• AI and ML security awareness

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

About Baseten

High-performance cloud inference platform for deploying, serving, and scaling open-source and custom artificial intelligence models.