Remote GRC & Security Compliance Lead

PVH (Tommy Hilfiger/Calvin Klein); United States; On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Remote-first environment

Annual team summits

Unlimited PTO

Full healthcare coverage

Parental leave (16 weeks)

Job summary

Baseten seeks an experienced GRC leader to establish and scale our security governance and compliance program. You will partner with engineering, operations, legal, and leadership to design policies, manage audits, and implement controls aligned with SOC 2, ISO 27001, and GDPR.

As an early member of our security team, you will build scalable risk management processes, oversee vendor assessments, support customer due diligence, and drive continuous improvement across security programs while

Qualifications

• 5+ years in GRC, security compliance, or information security roles.
• Experience in SaaS or cloud-native environments.
• Proven track record managing compliance audits and certification programs end-to-end.
• Cross-functional collaboration with engineering, product, and operations teams.

Responsibilities

• Design and maintain security governance frameworks, policies, and procedures.
• Build and manage company-wide risk assessment program.
• Lead efforts to achieve and maintain SOC 2, ISO 27001, GDPR, and other standards.
• Coordinate external audits and certification processes with evidence collection and remediation.
• Oversee vendor security assessments and third-party risk.
• Embed compliance into day-to-day operations with cross-functional teams.
• Support customer security questionnaires and due diligence requests.
• Deliver security/compliance training and drive continuous program improvement.

Skills

GRC

Policy development

Risk assessment

Audits & certifications

Third-party risk

Cross-functional teamwork

SOC 2

ISO 27001

GDPR

Cloud security (AWS/GCP)

GRC tools

AI/ML security

Regulatory awareness

Education

CISA

CISSP

CISM

ISO 27001 Lead Implementer

Tools

Vanta

Drata

Tugboat Logic

Secureframe

Job description

Baseten seeks an experienced GRC leader to establish and scale our security governance and compliance program. You will partner with engineering, operations, legal, and leadership to design policies, manage audits, and implement controls aligned with SOC 2, ISO 27001, and GDPR.

As an early member of our security team, you will build scalable risk management processes, oversee vendor assessments, support customer due diligence, and drive continuous improvement across security programs while