Senior Audit & Compliance Program Manager

Groq, Inc.; New York (NY); On-site; USD 187,000 - 252,000; Full time

Benefits offered by this job

Long-Term Incentive (LTI) Program

Employee benefits

Job summary

Groq, Inc. is seeking an Audit and Compliance Program Manager to run the audit program across multiple frameworks.

You will maintain the GRC system of record, own IT policies and security training, and drive the program from reactive to proactive through structured audit execution. You will manage cross‑functional stakeholders, minimize duplicate evidence, and coordinate with external auditors to ensure timely closure of findings across SOC 2 Type II, ISO 27001:2022 and additional frameworks.

Qualifications

• 5+ years in compliance program management, including hands‑on execution of at least two concurrent framework audits.
• Experience mapping controls across frameworks and reducing duplicate evidence collection, and administering a GRC platform as a system of record.
• Experience managing external auditors, drafting scope statements for executive review, and coordinating SMEs across stakeholders.
• Experience owning a policy lifecycle and a security awareness training program, with completion evidence that has stood up in audit.
• Experience at a Big 4 or equivalent audit firm delivering compliance engagements, so you know how auditors scope, sample and write findings.
• Legal background preferred

Responsibilities

• Run the audit calendar across SOC 2 Type II, ISO 27001:2022 and other frameworks; manage day-to-day auditor relationships, fieldwork logistics and evidence readiness.
• Track audit findings through to closure with owners and dates so findings do not recur between cycles.
• Maintain the control catalogue and framework mapping so one control test produces evidence for every framework it satisfies, and coordinate SME evidence requests so each control is evidenced once per period, not once per framework.
• Maintain Vanta GRC as the system of record: integration coverage, automated evidence, test ownership and documentation within their review cycle.
• Own the IT policy lifecycle (review cadence, approvals, acknowledgements) and the security awareness training program, with completion tracked as audit evidence; report audit status, open findings and evidence coverage to security leadership on a recurring basis.

Skills

Audit management

SOC 2

GRC platform

External auditors

Policy lifecycle

Security awareness

Big 4 experience

Legal background

Tools

Vanta

Job description

Groq, Inc. is seeking an Audit and Compliance Program Manager to run the audit program across multiple frameworks.

You will maintain the GRC system of record, own IT policies and security training, and drive the program from reactive to proactive through structured audit execution. You will manage cross‑functional stakeholders, minimize duplicate evidence, and coordinate with external auditors to ensure timely closure of findings across SOC 2 Type II, ISO 27001:2022 and additional frameworks.