GRC Manager
Hybrid (San Francisco), Hybrid (Remote), Hybrid (Toronto), Hybrid (New York), Hybrid (Montreal), Hybrid (Seattle)$150k - $250kFull-timePosted 1w ago
About the role
GRC Manager to build, support, and enhance Baseten’s security governance, compliance, and privacy programs across the platform. Collaborates with Engineering, Product, Security, and Legal to define requirements, drive implementation, and manage audits, vendor assessments, training, and customer assurance.
Responsibilities
- Product Compliance: Translate regulatory, framework, and customer requirements into clear product requirements and technical controls, partnering with Engineering and Product to build compliance into platform design and development.
- Governance & Policy Development: Design, implement, and maintain security governance frameworks, policies, and procedures that align with Baseten’s risk posture and industry best practices.
- Risk Management: Build and manage the company-wide risk assessment program, identifying, tracking, and mitigating key security and compliance risks.
- Compliance Operations: Support efforts to achieve and maintain compliance with SOC 2, ISO 27001/27701, HIPAA, FedRAMP and other applicable standards and regulations.
- Audit & Certification Management: Coordinate external audits and certification processes, ensuring evidence collection, control validation, and remediation plans are executed efficiently.
- Third-Party Risk Management: Oversee vendor security assessments and ensure third-party providers meet Baseten’s security and compliance standards.
- Cross-Functional Collaboration: Partner with Engineering, Product, and Operations teams to embed compliance and risk management into day-to-day operations and technical processes.
- Customer Trust & Assurance: Support customer security questionnaires, due diligence efforts, and documentation requests from prospective and existing clients.
- Training & Awareness: Develop and deliver security and compliance training to ensure company-wide understanding of key policies and responsibilities.
- Continuous Improvement: Stay current on evolving regulatory requirements and lead initiatives to mature our compliance and risk management programs.
Qualifications
- BS Degree in CS, CE, MIS or equivalent field
- 5+ years of experience in GRC, Security Compliance, or Information Security roles, ideally in a SaaS or cloud-native environment.
- Strong understanding of security frameworks and standards such as SOC 2, ISO 27001, NIST, and GDPR.
- Proven track record managing compliance audits and certification programs end-to-end.
- Experience working directly with leaders and executives within Enterprise organizations
- Experience working cross-functionally with technical and non-technical stakeholders to implement compliance and security controls.
- Proven experience driving product compliance by translating regulatory and customer requirements into actionable product controls with Engineering and Product
- Experience defining project requirements and driving implementation by translating compliance objectives into clear deliverables, coordinating cross-functional stakeholders, and managing execution through completion.
- Experience responding to customer security questionnaires and leading customer security interviews, with the ability to clearly communicate security controls, compliance posture, and risk management practices to technical and nontechnical audiences.
- Ability to thrive in a fast-paced, high-growth startup environment while maintaining structure and process discipline.
Skills
Required:GRCSOC 2ISO 27001/27701NIST
Benefits
- Competitive compensation, including meaningful equity
- (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents
- Flexible PTO policy including company wide Winter Break (offices closed from Christmas Eve to New Year’s Day)
- Paid parental leave
- Fertility and family-building stipend through Carrot
- (U.S. only) Company-facilitated 401(k)
- Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities.
Last updated Oct 21, 2026. Interested? Apply on the company site.
About Baseten
Inference is everything
Effortlessly serve optimized open source & custom models on the fastest, most reliable model delivery network.
AICloud InfrastructureDeveloper ToolsInference PlatformMachine LearningModel DeploymentModel Runtimesai-infrastructure-and-development
More open roles at Baseten
- Partner Enablement Lead4d agoHybrid (San Francisco), Hybrid (New York) · G&A
- Engineering Manager Runtime - Storage4d agoHybrid (San Francisco) · EPD
- Sales Manager - Enterprise (New York)1w agoHybrid (New York) · GTM
- Software Engineer - Inference Platform2w agoHybrid (San Francisco), Hybrid (Toronto) +3 more · EPD
- Marketing Recruiter2w agoHybrid (New York), Hybrid (San Francisco) · Talent