GRC & Security Compliance Lead

US Health Partners, LLC; San Francisco (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Equity eligibility

Flexible PTO

Job summary

Baseten is seeking an experienced GRC Manager to build and strengthen our security governance, risk, and compliance programs. You will work with Engineering, Product, Security, and Legal to define requirements, implement controls, and drive audits and certifications.

This role emphasizes customer assurance, vendor risk, and program maturity in a fast-growing SaaS environment. You will lead governance frameworks, risk assessments, and ongoing policy development while collaborating with executive

Qualifications

• BS degree in CS/CE/MIS or equivalent.
• 5+ years in GRC, security or information security roles (SaaS/cloud).
• Knowledge of SOC 2, ISO 27001, NIST, GDPR.
• Proven track record managing audits and certifications end-to-end.
• Experience working with executives in Enterprise orgs.
• Cross-functional collaboration to implement controls.
• Ability translating regulatory objectives into product deliverables.
• Strong communication of security posture to technical and non-technical audiences.

Responsibilities

• Translate regulatory and customer requirements into product requirements and controls with Engineering and Product.
• Design and maintain security governance policies and procedures.
• Build and manage company-wide risk assessment program.
• Support compliance with SOC 2, ISO 27001/27701, HIPAA, FedRAMP and other standards.
• Coordinate external audits and certification processes; ensure evidence collection and remediation.
• Oversee third-party security assessments and vendor risk management.
• Collaborate with cross-functional teams to embed compliance in operations.
• Support customer security questionnaires and due-diligence requests.
• Deliver security and compliance training; raise company-wide awareness.
• Drive continuous improvement of the GRC program.

Skills

GRC experience

Security compliance

Audit management

Cross-functional collaboration

Regulatory frameworks

Product compliance

Security controls

Customer questionnaires

Education

Bachelor's degree in CS/CE/MIS

Tools

Vanta

Drata

Secureframe

Anecdotes

Job description

Baseten is seeking an experienced GRC Manager to build and strengthen our security governance, risk, and compliance programs. You will work with Engineering, Product, Security, and Legal to define requirements, implement controls, and drive audits and certifications.

This role emphasizes customer assurance, vendor risk, and program maturity in a fast-growing SaaS environment. You will lead governance frameworks, risk assessments, and ongoing policy development while collaborating with executive