Senior GRC Leader: AI-Driven Compliance & Risk

Jobicy; United States; Hybrid; USD 139,000 - 168,000; Full time

Job summary

Mattermost seeks a senior GRC Manager to own and modernize governance, risk, and compliance across federal and commercial markets. You’ll drive automation, AI-enabled workflows, and continuous controls monitoring while coordinating audits and client security artifacts.

You will lead certification readiness (CMMC/NIST/ISO/SOC 2), manage risk and vendor programs, and scale the GRC team in a remote-first environment with strong cross-functional collaboration.

Qualifications

• Bachelor’s degree in computer science, information security, or related field, or significant GRC experience.
• Senior-level experience in governance, risk, and compliance with ownership of certification programs.
• Experience with federal standards including CMMC and NIST (800-171/800-53).
• Experience with ISO 27001 and SOC 2 Type II.
• Formal risk management and third-party risk management program experience.
• Customer security assurance including security questionnaires and trust center content.

Responsibilities

• Own and modernize Mattermost’s compliance programs across federal and commercial markets.
• Lead readiness, certification, and surveillance cycles.
• Operate end-to-end risk management from identification to treatment.
• Own third-party/vendor risk program including assessments.
• Apply GRC engineering and automation to replace manual evidence collection.
• Build AI-native workflows to accelerate recurring compliance work.
• Maintain control library, SSPs, POA&M, and policies.
• Coordinate external audits from scoping to remediation.
• Accelerate deal cycles via customer security questionnaires and trust content.
• Grow and lead the GRC team as the program scales.

Skills

GRC

CMMC

NIST 800-171/53

ISO 27001

SOC 2 Type II

Vendor Risk

Compliance Automation

Audit Management

Security Assurance

Tools

Vanta

Drata

AI platforms

Job description

Mattermost seeks a senior GRC Manager to own and modernize governance, risk, and compliance across federal and commercial markets. You’ll drive automation, AI-enabled workflows, and continuous controls monitoring while coordinating audits and client security artifacts.

You will lead certification readiness (CMMC/NIST/ISO/SOC 2), manage risk and vendor programs, and scale the GRC team in a remote-first environment with strong cross-functional collaboration.