GRC Program Manager

Segment (Twilio); Washington (District of Columbia); Hybrid; USD 90,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Commuter benefits

2 weeks paid time off at year end

Job summary

Palantir is seeking a GRC Program Manager to lead governance, risk, and compliance programs across Commercial, International, and US Government businesses. You will partner with compliance engineers, security teams, and developers to scale processes to meet regulatory standards.

You will coordinate audits (FedRAMP, SOC2, ISO27001, etc.), translate regulatory requirements into actionable workflows, and drive cross‑team collaboration to deliver compliant product features.

Qualifications

• Demonstrated success managing compliance programs for an enterprise software company, startup or other company.
• Experience with multiple GRC frameworks and standards, such as SOC2, ISO27001, IRAP or ENS.
• Experience in USG‑specific frameworks is particularly valuable: FedRAMP, NIST800‑53, DoDCCSRG, FISMA, or CMMC.
• Excellent judgment and composure in high‑pressure situations, including during active audits or compliance incidents.

Responsibilities

• Design, document, and continuously improve compliance processes and frameworks to scale GRC operations across Commercial, IG, and USG environments.
• Coordinate across internal and external audit cycles (FedRAMP, SOC2, ISO27001, etc.), ensuring evidence collection, remediation tracking, and stakeholder communication stay on schedule.
• Keep broad knowledge of everything involving or related to your projects, including audit timelines, control implementation status, and continuous monitoring obligations.
• Pre‑empt and resolve any issues that may steer projects off‑course.
• Enhance cross‑team collaboration across engineering, legal, and customer‑facing teams to drive key GRC deliverables through the entire software development and compliance lifecycle.

Skills

GRC program management

SOC2

ISO27001

FedRAMP

NIST SP 800-53

Audits

regulatory requirements understanding

stakeholder management

Job description

Overview

A World‑Changing Company Palantir builds the world’s leading software for data‑driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply‑chain disruptions, locate missing children, and more.

Role

As a GRC Program Manager, you are the engine behind Palantir’s Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve.

Responsibilities

Design, document, and continuously improve compliance processes and frameworks to scale GRC operations across Commercial, IG, and USG environments. Serve as connective tissue across teams, translating regulatory requirements into actionable workflows and ensuring accountability at every stage of the compliance lifecycle. Coordinate across internal and external audit cycles (FedRAMP, SOC2, ISO27001, etc.), ensuring evidence collection, remediation tracking, and stakeholder communication stay on schedule. Keep broad knowledge of everything involving or related to your projects, including audit timelines, control implementation status, and continuous monitoring obligations. Pre‑empt and resolve any issues that may steer projects off‑course. Enhance cross‑team collaboration across engineering, legal, and customer‑facing teams to drive key GRC deliverables through the entire software development and compliance lifecycle. Synthesize concrete compliance goals from product and regulatory vision, mapping global strategy to granular team tasks and issues. This must involve triaging requests from the field to focus the team, while escalating items that need immediate attention. Work with customer‑facing engineering teams on adoption, roll‑out, and support of compliance‑related product features and certifications.

What We Value

• Demonstrated success managing compliance programs for an enterprise software company, startup or other company.
• Experience with multiple GRC frameworks and standards, such as SOC2, ISO27001, IRAP or ENS.
• Experience in USG‑specific frameworks is particularly valuable: FedRAMP, NIST800‑53, DoDCCSRG, FISMA, or CMMC.
• Excellent judgment and composure in high‑pressure situations, including during active audits or compliance incidents.
• A creative approach to project management centered around lightweight frameworks that enable rapid iteration, while operating in harmony with a larger development and compliance organization.
• An ability to develop strong relationships with key internal stakeholders, auditors, and regulators, with a high level of empathy for our end‑users’ needs.
• Meticulous attention to detail, holding tightly to the team’s compliance and product quality bar.
• A proven track record of building and scaling compliance processes from the ground up, particularly in USG‑regulated environments.
• Experience with risk management methodologies, including maintaining risk registers, conducting risk assessments, and managing third‑party or vendor risk programs.

What We Require

This role requires that you work from the country listed on this job posting and that you are based within a commutable distance of your local Palantir office. Willingness and eligibility to obtain a U.S. security clearance preferred.

Salary

The estimated salary range for this position is $90,000–$160,000peryear. Total compensation may also include Restricted Stock Units, sign‑on bonus, and other potential future incentives. Total compensation will be determined by each individual’s relevant qualifications, work experience, skills, and other factors.

Benefits

• Employees (and their eligible dependents) can enroll in medical, dental, and vision insurance as well as voluntary life insurance.
• Employees are automatically covered by Palantir’s basic life, AD&D, and disability insurance.
• Commuter benefits.
• Take what you need paid time off, not accrual‑based.
• Two weeks paid time off built into the end of each year (subject to team and business needs).
• 10 paid holidays throughout the calendar year.
• Supportive leave of absence program, including time off for military service and medical events.
• Paid leave for new parents and subsidized back‑up care for all parents.
• Fertility and family‑building benefits, including but not limited to adoption, surrogacy, and preservation.
• Stipend to help with expenses that come with a new child.
• Employees can enroll in Palantir’s 401(k) plan.

Life at Palantir

We want every Palantirian to achieve their best outcomes; we celebrate individuals’ strengths, skills, and interests rather than rely on traditional career ladders. Promoting health and well‑being across all areas of Palantirians’ lives is one of the ways we invest in our community. Learn more at Life at Palantir. Mandates vary by region. We encourage employees to work from our offices to foster connectivity and innovation; most teams offer hybrid options. Some roles allow remote work on an exceptional basis must work from the state of employment. Mandatory onsite work exists for specified roles. Must not submit mandatory payments or financial information for any part of the interview process; report scams to US FBI IC3. Palantir is committed to mandatory reasonable accommodations for applicants with disabilities.

EEO Statement

Palantir values excellence regardless of background. We are proud to be an Equal Opportunity Employer for all, including but not limited to Veterans and those with disabilities. Must not obligate mandatory payments or obligatory mandatory mandate mandatory mandatory mandatory.