GRC Manager: AI-Driven Federal & Commercial Compliance

Mattermost; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

Mattermost is hiring a GRC Manager to own and modernize our governance, risk, and compliance program across federal and commercial markets. You will lead the program end to end, ensuring readiness, certifications, and continuous monitoring with an engineering-led, AI-native approach.

In this hands‑on role you will coordinate across security, IT, and engineering teams, manage external audits, and scale the function as the business grows, driving trust and compliance excellence.

Qualifications

• Bachelor's degree in computer science, information security, or related field.
• Proven senior-level experience in governance, risk, and compliance with ownership of a certification program.
• Experience with U.S. Federal standards including CMMC and NIST 800-171/800-53.
• Experience with ISO 27001 and SOC 2 Type II.
• Experience operating a formal risk management program.
• Experience running a third-party and vendor risk management program.
• Experience owning customer security assurances (security questionnaires, trust center content).
• Knowledge of security controls for cloud environments (AWS, GCP, Azure).
• Excellent written and verbal communication skills.

Responsibilities

• Own and modernize federal and commercial GRC programs.
• Lead readiness, certification, and surveillance cycles.
• Run the end-to-end risk management process.
• Oversee third‑party and vendor risk management.
• Apply automation and AI to evidence collection.
• Build AI-native workflows to speed compliance work.
• Maintain control libraries, SSPs, POA&Ms, and policies.
• Coordinate external audits from scoping to remediation.
• Manage customer security questionnaires and trust content.
• Grow and lead the GRC team as programs scale.

Skills

GRC leadership

Governance

Risk management

Compliance

Security audits

Communication skills

Education

Bachelor's degree in CS/InfoSec or related field

Tools

Vanta

Drata

Claude/OpenAI/Gemini

Job description

Mattermost is hiring a GRC Manager to own and modernize our governance, risk, and compliance program across federal and commercial markets. You will lead the program end to end, ensuring readiness, certifications, and continuous monitoring with an engineering-led, AI-native approach.

In this hands‑on role you will coordinate across security, IT, and engineering teams, manage external audits, and scale the function as the business grows, driving trust and compliance excellence.