← All roles

GRC Program Manager

Clay· 200 - Product & Design
Apply on company site
Hybrid (New York)$130k - $180kFull-timePosted 2w ago

About the role

GRC Program Manager to build and own operational systems for vendor management, data privacy, and security. Create scalable processes across engineering, security, legal and business teams to support onboarding vendors and handling customer information in a fast-growing SaaS environment.

Responsibilities

  • Vendor Onboarding & Risk Management: Build and own the end-to-end vendor onboarding compliance process. When teams want to onboard a new vendor, conduct proper review (DPA, SOC 2/GDPR data compliance), update our subprocessor list, and manage customer notifications
  • GRC Vendor Management: Serve as the internal owner and point of contact for external GRC vendors. Manage intake, ticketing, SLAs, quality review, and performance metrics to ensure security and compliance requests are tracked, resolved, and continuously improved
  • Compliance Reviews: Build processes for and complete compliance reviews when teams evaluate purchasing new data sets and vendor compliance
  • Cross-Functional Program Building: Create operational processes and systems from scratch to scale compliance work across the company. You'll own programs end-to-end, not just coordinate projects
  • Customer Security Support: Assist in responding to security and privacy questionnaires from prospective and existing customers, with a particular focus on privacy, data protection, and compliance-related questions

Qualifications

  • Bachelor's degree in Information Security, Business, or a related field (or equivalent experience)
  • 5+ years of experience building and scaling operational programs, ideally in a SaaS or tech environment
  • Strong builder mindset: you're excited to create processes and systems from scratch, not just maintain existing ones
  • Understanding of privacy laws and frameworks (GDPR, CCPA/CPRA, etc.) with the ability to apply them practically across vendor management, data flows, and employee compliance
  • Experience with vendor risk assessments, security questionnaires, and DPA/subprocessor management
  • Familiarity with DSAR processes and compliance tools like Vanta, Transcend, or similar platforms
  • Excellent project management skills with the ability to drive complex, cross-functional initiatives to completion
  • Strong communication skills for partnering with legal, engineering, data teams, and business stakeholders
  • Ability to work independently, prioritize effectively, and adapt in a fast-paced, high-growth environment

Skills

Required:Vendor onboardingGRC vendor managementPrivacy frameworks
Nice to have:DSAR tools
Last updated Oct 14, 2026. Interested? Apply on the company site.
Clay logo

About Clay

Figma for 3D design

We build software to allow anyone, anywhere to create in 3D together. We believe that collaborating in 3D should feel magical and we're working to make it happen.

ai-agents-and-applicationsbrex-fastest-growing-2025collaborationdesign-toolsproductivitysaaswing-list-2026wing-list-2026-late-stage
Company profileWebsite

More open roles at Clay