Remote-Eligible Audit & Compliance Program Lead

Groq, Inc.; Texas; Hybrid; USD 187,000 - 252,000; Full time

Benefits offered by this job

Long-Term Incentive (LTI) Program

Employee benefits

Job summary

Groq, Inc. is seeking an Audit and Compliance Program Manager to run the audit program across multiple frameworks.

You will consolidate evidence so one test supports several standards, maintain the GRC system of record, and own IT policy lifecycle and security training in a proactive program. You will manage external auditors, drive evidence readiness, and report status to security leadership as Groq matures its GRC function.

Qualifications

• 5+ years in compliance program management, including hands-on execution of at least two concurrent framework audits.
• Experience mapping controls across frameworks and reducing duplicate evidence collection.
• Experience managing external auditors and drafting scope statements for executive review.
• Experience owning a policy lifecycle and a security awareness training program.
• Experience at a Big 4 or equivalent audit firm delivering compliance engagements.
• Legal background preferred.

Responsibilities

• Run the audit calendar across SOC 2 Type II, ISO 27001:2022 and other frameworks; manage day-to-day auditor relationships, fieldwork logistics and evidence readiness.
• Track audit findings through to closure with owners and dates so findings do not recur between cycles.
• Maintain the control catalogue and framework mapping so one test produces evidence for every framework it satisfies.
• Maintain Vanta GRC as the system of record: integration coverage, automated evidence, test ownership and documentation within their review cycle.
• Own the IT policy lifecycle and the security awareness training program, with completion evidence that has stood up in audit.

Skills

Compliance program management

Audit execution

GRC tooling

Stakeholder management

Policy lifecycle ownership

Education

Legal background preferred

Tools

Vanta GRC

GRC platform

Job description

Groq, Inc. is seeking an Audit and Compliance Program Manager to run the audit program across multiple frameworks.

You will consolidate evidence so one test supports several standards, maintain the GRC system of record, and own IT policy lifecycle and security training in a proactive program. You will manage external auditors, drive evidence readiness, and report status to security leadership as Groq matures its GRC function.