GRC Manager: Security, Compliance & Risk for SaaS

Baseten; Seattle (WA); On-site; USD 150,000 - 250,000; Full time

Benefits offered by this job

Competitive compensation

100% medical, dental & vision (US)

Flexible PTO with Winter Break

Paid parental leave

Fertility and family-building stipend

401(k) company match (US)

ML startup exposure and learning

Job summary

Baseten is hiring a GRC Manager to build and enhance governance, risk, and compliance across the platform. You will work with Engineering, Product, Security, and Legal to define requirements, assess capabilities, and drive implementation from scoping to validation.

You will also lead customer assurance and help translate regulatory needs into product plans. You will contribute to governance, risk management, audits, vendor assessments, and security awareness, ensuring Baseten meets high privacy

Qualifications

• BS Degree in CS, CE, MIS or equivalent.
• 5+ years in GRC, security compliance, or information security.
• Strong understanding of SOC 2, ISO 27001, NIST, GDPR.
• Experience managing audits and certifications end-to-end.
• Experience with enterprise leaders and cross-functional teams.
• Ability translating regulatory requirements into product controls.

Responsibilities

• Translate regulatory and customer requirements into product controls with Eng and Product.
• Design and maintain security governance frameworks, policies, and procedures.
• Build and manage a company-wide risk assessment program.
• Coordinate audits and certification processes with evidence collection and remediation.
• Oversee third-party vendor security assessments and controls.
• Collaborate with Engineering, Product, and Operations to embed compliance into daily work.
• Support customer security questionnaires and due diligence efforts.
• Develop and deliver security training to promote company-wide awareness.

Skills

GRC management

Security compliance

Information security

Audit management

Vendor risk

Cross-functional

Security controls

Cloud security

Education

BS in CS/CE/MIS

Tools

Vanta

Drata

Secureframe

Anecdotes

Job description

Baseten is hiring a GRC Manager to build and enhance governance, risk, and compliance across the platform. You will work with Engineering, Product, Security, and Legal to define requirements, assess capabilities, and drive implementation from scoping to validation.

You will also lead customer assurance and help translate regulatory needs into product plans. You will contribute to governance, risk management, audits, vendor assessments, and security awareness, ensuring Baseten meets high privacy