GRC Program Manager: AI‑Driven Audit Lead (Hybrid)

Coda; San Francisco (CA); Hybrid; USD 170,000 - 210,000; Full time

Benefits offered by this job

Health benefits

Disability & life insurance

401(k) matching

Parental leave

Paid time off

Floating holidays

Home office stipend

Professional development budget

Job summary

Superhuman is seeking an experienced Program Manager to lead the unified audit program across SOC 2, ISO 27000, ISO 42001, and related frameworks. You will partner with audit firms, control owners, and GRC partners to expand scope and streamline evidence collection.

You will build runbooks, drive automation, and help ensure audits run efficiently as the company grows, including global expansions and new platforms.

Qualifications

• 5+ years of program management for multi‑workstream programs.
• 5+ years running external security audits (SOC 2, ISO 27001).
• Knowledge of SOC 2, ISO 27000 family, ISO 42001, PCI-DSS.
• Experience leading gap assessments for new frameworks.
• Experience building/improving audit processes (calendars, runbooks).
• Technical fluency to understand cloud evidence and automation opportunities.
• Strong communication, prioritization, and stakeholder influence.

Responsibilities

• Run the unified audit program with milestones and risk tracking.
• Plan and run quarterly audits from scoping to findings closeout.
• Coordinate with Product/Engineering on audit boundaries.
• Maintain audit operating model and runbooks as the program scales.
• Automate evidence collection and reporting; work with GRC Eng.
• Partner with GRC and Procurement on third‑party risk management.
• Align audit windows across frameworks to avoid duplicate requests.
• Plan new audits, evaluate scope, and present effort estimates.
• Collaborate with control owners to deliver evidence and close findings.
• Manage auditor relationships and report status to leadership.

Skills

Program management

Cross‑functional leadership

Security audits

Risk management

Automation awareness

AI tooling

Tools

GRC Platform

Internal tooling

Job description

Superhuman is seeking an experienced Program Manager to lead the unified audit program across SOC 2, ISO 27000, ISO 42001, and related frameworks. You will partner with audit firms, control owners, and GRC partners to expand scope and streamline evidence collection.

You will build runbooks, drive automation, and help ensure audits run efficiently as the company grows, including global expansions and new platforms.