Senior GRC Audit & Compliance Manager

Groq, Inc.; United States; Hybrid; USD 187,000 - 252,000; Full time

Job summary

Groq, Inc. is seeking an Audit and Compliance Program Manager to run the audit program across multiple frameworks and maintain the GRC system of record.

You will own IT policies and security training, coordinating with external auditors to mature a proactive compliance posture. Based in the United States, the role requires 5+ years of hands-on audit experience, cross-framework mapping, and the ability to drive evidence collection while keeping control catalogs up to date.

Qualifications

• 5+ years in compliance program management with hands-on audits.
• Experience mapping controls across frameworks and reducing duplicate evidence.
• Experience managing external auditors and drafting scope statements.
• Experience owning a policy lifecycle and a security awareness training program with audit evidence.
• Experience at a Big 4 or equivalent audit firm delivering compliance engagements.
• Legal background preferred.

Responsibilities

• Run the audit calendar across SOC 2 Type II, ISO 27001:2022 and other frameworks; manage day-to-day auditor relationships, fieldwork logistics and evidence readiness.
• Track audit findings through to closure with owners and dates so findings do not recur between cycles.
• Maintain the control catalogue and framework mapping so one test produces evidence for every framework it satisfies.
• Maintain Vanta GRC as the system of record: integration coverage, automated evidence, test ownership and documentation.
• Own the IT policy lifecycle and the security awareness training program, with completion tracked as audit evidence; report audit status to security leadership.

Skills

Compliance management

Audit coordination

GRC tooling

External auditors

Policy lifecycle

Security training

Education

Legal background

Tools

GRC platform

Vanta GRC

Job description

Groq, Inc. is seeking an Audit and Compliance Program Manager to run the audit program across multiple frameworks and maintain the GRC system of record.

You will own IT policies and security training, coordinating with external auditors to mature a proactive compliance posture. Based in the United States, the role requires 5+ years of hands-on audit experience, cross-framework mapping, and the ability to drive evidence collection while keeping control catalogs up to date.