GRC Manager

Glocomms; San Francisco (CA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Full Health Benefits

Equity participation

Relocation Support

Generous PTO

Job summary

Glocomms seeks a GRC Manager to own and scale its compliance and governance programs. You will maintain key security certifications, drive audit readiness, and strengthen operations while partnering with Security, Engineering, Legal, and Go-To-Market teams.

This highly visible role supports enterprise customer requirements and ensures a strong security and compliance posture during growth.

Qualifications

• 5+ years in compliance, GRC, information security, audit, or risk management.
• Strong knowledge of SOC 2, ISO 27001, HIPAA, and security control frameworks.
• Experience managing internal and external audits.
• Familiarity with risk management, policy development, vendor risk assessments, and security governance.
• Experience supporting enterprise customer security reviews and compliance inquiries.
• Excellent communication across technical and non-technical teams.
• Hands-on experience with Vanta, Drata, or similar compliance automation platforms.

Responsibilities

• Own and manage compliance programs across SOC 2, ISO 27001, and HIPAA.
• Lead internal and external audits, including audit preparation and remediation.
• Maintain policies, procedures, controls, and documentation for compliance.
• Conduct risk assessments and mitigate security and compliance risks.
• Manage third-party and vendor risk review processes.
• Support customer security reviews, due diligence requests, RFPs, and security questionnaires.
• Partner with Engineering and Security to improve control effectiveness.
• Drive compliance reporting, training, awareness, and continuous improvement.
• Leverage GRC automation platforms to streamline operations.

Skills

SOC 2

ISO 27001

HIPAA

GRC

Information security

Audit management

Risk management

Vendor risk

CISA

CISM

CRISC

Tools

Vanta

Drata

Job description

Glocomms is partnered with a leading Voice AI organization seeking a GRC Manager to own and scale its compliance and governance programs. This individual will be responsible for maintaining key security certifications, driving audit readiness, strengthening compliance operations, and partnering cross-functionally to support enterprise customer requirements.

This is a highly visible role that will work closely with Security, Engineering, Legal, and Go-To-Market teams to ensure the organization maintains a strong security and compliance posture while supporting continued growth.

Overview

Glocomms is partnered with a leading Voice AI organization seeking a GRC Manager to own and scale its compliance and governance programs. This individual will be responsible for maintaining key security certifications, driving audit readiness, strengthening compliance operations, and partnering cross-functionally to support enterprise customer requirements.

This is a highly visible role that will work closely with Security, Engineering, Legal, and Go-To-Market teams to ensure the organization maintains a strong security and compliance posture while supporting continued growth.

Responsibilities

• Own and manage compliance programs across frameworks such as SOC 2, ISO 27001, and HIPAA.
• Lead internal and external audits, including audit preparation, evidence collection, auditor coordination, and remediation efforts.
• Maintain policies, procedures, controls, and documentation to support ongoing compliance requirements.
• Conduct risk assessments and partner with stakeholders to identify and mitigate security and compliance risks.
• Manage third-party and vendor risk review processes.
• Support customer security reviews, due diligence requests, RFPs, and security questionnaires.
• Partner with Engineering and Security teams to evaluate and improve control effectiveness.
• Drive compliance reporting, training, awareness programs, and continuous improvement initiatives.
• Leverage GRC and compliance automation platforms to streamline audit and compliance operations.

Requirements

• 5+ years of experience in compliance, GRC, information security, audit, or risk management.
• Strong knowledge of SOC 2, ISO 27001, HIPAA, and security control frameworks.
• Experience managing both internal and external audits.
• Familiarity with risk management, policy development, vendor risk assessments, and security governance.
• Experience supporting enterprise customer security reviews and compliance inquiries.
• Excellent communication skills with the ability to collaborate across technical and non-technical teams.
• Hands-on experience with Vanta, Drata, or similar compliance automation platforms.

Nice to Have

• Background supporting healthcare customers or healthcare compliance requirements.
• CISA, CISM, or CRISC Certifications

Benefits

• Full Health Benefits
• Equity participation
• Relocation Support
• Generous PTO