GRC Manager

📋 Description

• Own and modernize Mattermost's GRC programs across federal and commercial markets.
• Lead readiness, certification, and surveillance cycles across programs.
• Oversee end-to-end risk management, from identification to acceptance.
• Own third-party and vendor risk management, including security assessments.
• Apply GRC engineering and automation to automate evidence collection.
• Build AI-native workflows to accelerate recurring compliance work.

🎯 Requirements

• Bachelor's degree in CS/InfoSec or equivalent GRC experience.
• Senior-level GRC experience with ownership of a certification program.
• Experience with U.S. Federal standards: CMMC, NIST 800-171/800-53.
• ISO 27001 and SOC 2 Type II.
• Experience operating a formal risk management program.
• Experience running third-party/vendor risk management.

🎁 Benefits

• Mission-driven work supporting secure collaboration.
• Remote-first, globally distributed team.
• Open source at the core of our work.
• AI-forward environment with cutting-edge tooling.
• Unique scope: end-to-end GRC across markets.