GRC Manager: Security & Compliance for SaaS AI

Candidate; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive equity

US medical/dental/vision (100%)

Flexible PTO including Winter Break

Paid parental leave

Fertility and family-building stipend

401(k) matching

ML startup exposure

Job summary

Baseten is seeking an experienced GRC Manager to lead security governance, risk, and privacy programs. You will partner with Engineering, Product, Security, and Legal to define compliance requirements and drive implementation from scoping to validation.

You’ll manage audits, third-party risk, and customer assurance while maturing Baseten’s program in a fast-growing SaaS environment. This role emphasizes collaboration, policy development, and ongoing security training.

Qualifications

• 5+ years in GRC, security compliance, or information security roles in SaaS/cloud environments.
• Experience leading compliance audits and certification programs end-to-end.
• Proven ability to translate regulatory and customer requirements into product controls.

Responsibilities

• Translate regulatory, framework, and customer requirements into product requirements and controls.
• Design and maintain security governance frameworks, policies, and procedures.
• Lead risk assessment program across the company; identify, track, mitigate risks.
• Support SOC 2, ISO 27001/27701, HIPAA, FedRAMP audits and certifications.
• Coordinate vendor security assessments and third-party risk management.
• Collaborate with Engineering, Product, Security, and Legal to embed compliance in day-to-day processes.
• Support customer security questionnaires and due diligence requests.
• Deliver security and compliance training across the company.

Skills

GRC/InfoSec

Product compliance

Executive collaboration

Regulatory understanding

Risk assessment

Education

BS in CS/CE/MIS

Tools

Vanta

Drata

Secureframe

Anecdotes

Job description

Baseten is seeking an experienced GRC Manager to lead security governance, risk, and privacy programs. You will partner with Engineering, Product, Security, and Legal to define compliance requirements and drive implementation from scoping to validation.

You’ll manage audits, third-party risk, and customer assurance while maturing Baseten’s program in a fast-growing SaaS environment. This role emphasizes collaboration, policy development, and ongoing security training.