GRC Program Lead — Enterprise Compliance & Risk

Palantir Technologies; Washington (District of Columbia); On-site; USD 90,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Commuter benefits

PTO

Job summary

Palantir Technologies is seeking a GRC Program Manager to lead governance, risk, and compliance initiatives across Commercial, International, and USG environments. You will design scalable processes, coordinate FedRAMP/SOC 2/ISO 27001 audits, and translate regulatory requirements into actionable workflows for engineering, legal, and customer‑facing teams.

The role emphasizes proactive risk management, stakeholder engagement, and the ability to manage complex program milestones in a dynamic

Qualifications

• Experience building and scaling GRC programs for complex software environments.
• Familiarity with multiple regulatory frameworks and audit cycles.
• Ability to translate regulatory requirements into actionable workflows.

Responsibilities

• Design, document, and improve compliance processes and frameworks.
• Coordinate internal and external audit cycles (FedRAMP, SOC 2, ISO 27001, etc.).
• Track audit timelines, control status, and monitoring obligations.
• Foster cross‑team collaboration to deliver GRC outcomes across product lifecycles.
• Synthesize regulatory goals into concrete team tasks and priorities.
• Support customer‑facing engineering teams on compliance features and certifications.
• Maintain a transparent, up‑to‑date view of all project state and risks.

Skills

GRC frameworks

SOC 2

ISO 27001

FedRAMP

NIST 800-53

Audit coordination

Risk management

Stakeholder management

Job description

Palantir Technologies is seeking a GRC Program Manager to lead governance, risk, and compliance initiatives across Commercial, International, and USG environments. You will design scalable processes, coordinate FedRAMP/SOC 2/ISO 27001 audits, and translate regulatory requirements into actionable workflows for engineering, legal, and customer‑facing teams.

The role emphasizes proactive risk management, stakeholder engagement, and the ability to manage complex program milestones in a dynamic