GRC Manager - SaaS Security & Compliance

Baseten; San Francisco (CA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Equity

Medical/Dental/Vision

Flexible PTO

Parental leave

Fertility stipend

401(k)

Learning opportunities

Job summary

Baseten in San Francisco seeks an experienced GRC Manager to build and enhance Baseten’s security governance, compliance, and privacy programs across our platform.

You will collaborate with Engineering, Operations, Legal and leadership to design policies, manage audits, and implement controls aligned with SOC 2, ISO 27001/27701, HIPAA, and FedRAMP. You’ll drive risk assessment, third‑party risk, and training, maturing our compliance program as we scale.

Qualifications

• 5+ years in GRC, security compliance, or information security in SaaS/cloud-native environments.
• Strong understanding of security frameworks and standards (SOC 2, ISO 27001, NIST, GDPR).
• Proven track record managing compliance audits and certifications end-to-end.
• Experience with access management concepts and third-party risk.
• Experience collaborating with technical and non-technical stakeholders to implement controls.
• Excellent organization, documentation, and communication skills.

Responsibilities

• Design, implement, and maintain security governance frameworks, policies, and procedures.
• Build and manage company-wide risk assessment programs.
• Lead audits and certifications for SOC 2, ISO 27001/27701, HIPAA, FedRAMP.
• Coordinate external audits and evidence collection.
• Oversee third‑party security assessments and vendor risk.
• Partner with Engineering, Product, and Operations to embed compliance in processes.
• Support customer security questionnaires and due diligence efforts.
• Deliver security and compliance training to the organization.
• Drive continuous improvement of risk management programs.

Skills

GRC

Security frameworks

Audit management

Cross-functional

Documentation

Tools

Vanta

Drata

Secureframe

Job description

Baseten in San Francisco seeks an experienced GRC Manager to build and enhance Baseten’s security governance, compliance, and privacy programs across our platform.

You will collaborate with Engineering, Operations, Legal and leadership to design policies, manage audits, and implement controls aligned with SOC 2, ISO 27001/27701, HIPAA, and FedRAMP. You’ll drive risk assessment, third‑party risk, and training, maturing our compliance program as we scale.