GRC Manager: Compliance & Audit Leader for Enterprise Growth

Glocomms; San Francisco (CA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Full Health Benefits

Equity participation

Relocation Support

Generous PTO

Job summary

Glocomms seeks a GRC Manager to own and scale its compliance and governance programs. You will maintain key security certifications, drive audit readiness, and strengthen operations while partnering with Security, Engineering, Legal, and Go-To-Market teams.

This highly visible role supports enterprise customer requirements and ensures a strong security and compliance posture during growth.

Qualifications

• 5+ years in compliance, GRC, information security, audit, or risk management.
• Strong knowledge of SOC 2, ISO 27001, HIPAA, and security control frameworks.
• Experience managing internal and external audits.
• Familiarity with risk management, policy development, vendor risk assessments, and security governance.
• Experience supporting enterprise customer security reviews and compliance inquiries.
• Excellent communication across technical and non-technical teams.
• Hands-on experience with Vanta, Drata, or similar compliance automation platforms.

Responsibilities

• Own and manage compliance programs across SOC 2, ISO 27001, and HIPAA.
• Lead internal and external audits, including audit preparation and remediation.
• Maintain policies, procedures, controls, and documentation for compliance.
• Conduct risk assessments and mitigate security and compliance risks.
• Manage third-party and vendor risk review processes.
• Support customer security reviews, due diligence requests, RFPs, and security questionnaires.
• Partner with Engineering and Security to improve control effectiveness.
• Drive compliance reporting, training, awareness, and continuous improvement.
• Leverage GRC automation platforms to streamline operations.

Skills

SOC 2

ISO 27001

HIPAA

GRC

Information security

Audit management

Risk management

Vendor risk

CISA

CISM

CRISC

Tools

Vanta

Drata

Job description

Glocomms seeks a GRC Manager to own and scale its compliance and governance programs. You will maintain key security certifications, drive audit readiness, and strengthen operations while partnering with Security, Engineering, Legal, and Go-To-Market teams.

This highly visible role supports enterprise customer requirements and ensures a strong security and compliance posture during growth.