GRC Manager

📋 Description

• Own and administer G2's security policy library (35+ documents), leading the annual review cycle
• Lead response to customer and prospect security questionnaires — from short-form intake to 100+
• Own G2's public Trust Center and serve as the company's front-line representative to customers and
• Run the third-party/vendor risk management program, reviewing AI-assisted vendor risk assessments
• Manage data subject access request (DSAR) intake and fulfillment, ensuring requests are documented
• Support security addendum and contract redlines, partnering with Legal and counterparties through

🎯 Requirements

• 7–10 years of progressive experience in IT Governance, Risk, and Compliance or information
• Deep working knowledge of SOC 2 Type II, ISO 27001, NIST CSF, and common SaaS/cloud security and
• Hands-on experience with a modern GRC/compliance automation platform (e.g., Vanta, Drata, OneTrust
• Proven experience managing high-volume customer security questionnaires and knowledge-library
• Experience running a third-party/vendor risk management program, including risk scoring and
• Experience managing DSAR or other privacy request workflows in line with regulatory timelines.

🎁 Benefits

• CISSP, CRISC, CISM, or CISA certification.
• Experience leading an organization through initial ISO 27001 certification or a comparable
• Familiarity with procurement-to-GRC integrations and automating vendor intake into a risk workflow.
• Working knowledge of global privacy regulations (GDPR, CCPA, LGPD) and experience partnering with
• Experience managing a GRC program budget and vendor/contract relationships (audit firms, tooling
• Track record operating as a senior individual contributor who drives outcomes through influence and