150K–250K USD / year
GRC Manager
OperationsHybrid — San Francisco
Published on 2026-10-08
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build and mature Baseten’s governance, risk, compliance, and privacy programs. The role combines product compliance and cross-functional control implementation with audits, customer assurance, vendor risk, and security awareness.
About the company
Baseten is an inference cloud that helps companies run and scale AI models in production with flexible infrastructure and developer tooling.
The team
EPD and Security
What you'll do
- Translate regulatory, framework, and customer requirements into product controls with Engineering and Product
- Develop and maintain security governance frameworks, policies, and procedures
- Build and manage the company-wide risk assessment program
- Support SOC 2, ISO 27001/27701, HIPAA, FedRAMP, and other compliance programs
- Coordinate audits, certifications, evidence collection, control validation, and remediation
- Manage vendor security assessments and third-party risk
- Respond to customer security questionnaires and due diligence requests
- Develop and deliver security and compliance training
What we're looking for
- Bachelor’s degree in CS, CE, MIS, or equivalent
- 5+ years of experience in GRC, security compliance, or information security, ideally in SaaS or cloud-native environments
- Strong knowledge of SOC 2, ISO 27001, NIST, and GDPR
- Track record managing compliance audits and certification programs end to end
- Experience translating compliance requirements into product controls with Engineering and Product
- Experience leading cross-functional implementation and communicating security posture to customers and executives
- Able to thrive in a fast-paced, high-growth startup
Nice to have
- Cloud security compliance experience in AWS or GCP
- Experience with GRC tools such as Vanta, Drata, Secureframe, or Anecdotes
- Knowledge of AI/ML security, data privacy, and model governance
- Experience building security controls at a startup
- Certifications such as CISA, CISSP, CISM, or ISO 27001 Lead Implementer
Benefits
- Meaningful equity
- 100% medical, dental, and vision coverage for U.S. employees and dependents
- Flexible PTO and company-wide winter break
- Paid parental leave
- Fertility and family-building stipend
- Company-facilitated 401(k) for U.S. employees