GRC Program Manager

📋 Description

• Design and improve GRC processes to scale compliance across Commercial, IG, and USG.
• Translate regulatory requirements into actionable workflows and ensure accountability.
• Coordinate FedRAMP, SOC 2, ISO 27001 audits; track evidence and remediation.
• Maintain project state: audits, controls, and monitoring obligations.
• Foster cross-team collaboration to drive GRC deliverables through dev and compliance lifecycles.
• Translate regulatory vision into goals; triage field requests and escalate urgent items.
• Collaborate with customer-facing teams on adoption of compliance features and certifications.

🎯 Requirements

• Proven success managing enterprise GRC programs.
• Experience with SOC 2, ISO 27001, FedRAMP, NIST 800-53, and DoD SRG.
• Calm under pressure during audits and incidents.
• Creative, lightweight PM approach for rapid iteration within a larger org.
• Strong stakeholder, auditor, regulator relationships; empathetic to users.
• Meticulous attention to detail and quality bar.
• Proven track record building and scaling USG-regulated GRC processes.
• Experience with risk management, risk registers, and third-party risk.

🎁 Benefits

• Medical, dental, and vision insurance with voluntary life insurance.
• Basic life, AD&D and disability insurance coverage.
• Commuter benefits.
• Take what you need paid time off, not accrual based.
• 2 weeks paid time off at end of year.
• 10 paid holidays per year.
• Leave of absence program including military and medical events.
• Paid parental leave and back-up care support.
• Fertility and family-building benefits.
• Stipend for new child expenses.
• Palantir 401(k) plan enrollment.