GRC Program Manager
GRC Program Manager partnering with compliance engineers, security teams, and developers to design, scale, and operate Governance, Risk, and Compliance processes and frameworks. Requires experience managing compliance programs and multiple GRC standards (SOC 2, ISO 27001, FedRAMP, NIST), with strong project management and stakeholder coordination skills.
About the job
Core Responsibilities
- Design, document, and continuously improve compliance processes and frameworks to scale GRC operations across Commercial, International, and US Government environments.
- Serve as connective tissue across teams, translating regulatory requirements into actionable workflows and ensuring accountability at every stage of the compliance lifecycle.
- Coordinate across internal and external audit cycles (FedRAMP, SOC 2, ISO 27001, etc.), ensuring evidence collection, remediation tracking, and stakeholder communication stay on schedule.
- Maintain broad and complete visibility into projects, including audit timelines, control implementation status, and continuous monitoring obligations. Pre-empt and resolve issues that may derail projects.
- Enhance cross-team collaboration across engineering, legal, and customer-facing teams to drive key GRC deliverables through the software development and compliance lifecycle.
- Synthesize compliance goals from product and regulatory vision, mapping strategy to granular team tasks. Triage requests from the field to focus the team and escalate urgent items.
- Work with customer-facing engineering teams on adoption, rollout, and support of compliance-related product features and certifications.
What We Value
- Demonstrated success managing compliance programs for an enterprise software company, startup, or similar.
- Experience with multiple GRC frameworks and standards such as SOC 2, ISO 27001, IRAP, or ENS. USG-specific frameworks are particularly valuable: FedRAMP, NIST 800-53, DoD CC SRG, FISMA, or CMMC.
- Excellent judgment and composure in high-pressure situations, including during active audits or compliance incidents.
- Creative approach to project management using lightweight frameworks that enable rapid iteration while aligning with larger development and compliance organizations.
- Ability to develop strong relationships with internal stakeholders (including customer-facing teams), auditors, and regulators, with high empathy for end-users' needs.
- Meticulous attention to detail and commitment to maintaining high compliance and product quality standards.
- Proven track record of building and scaling compliance processes from the ground up, particularly in USG-regulated environments.
- Experience with risk management methodologies, including maintaining risk registers, conducting risk assessments, and managing third-party or vendor risk programs.
What We Require
- Must work from the country listed on this job posting and be based within a commutable distance of your local Palantir office.
- Willingness and eligibility to obtain a U.S. security clearance preferred.
Skills
GRC, SOC 2, ISO 27001, FedRAMP, Nist 800-53, Risk Management, Compliance Frameworks, Audit Coordination, Project Management, Regulatory Compliance, Vendor Risk Management, Us Government Compliance
Similar jobs
Ascertain
United States
Processes and oversees cardiology prior authorizations, coordinates documentation with healthcare providers and payors, and helps improve AI-powered healthcare workflows. Requires 4+ years of cardiology prior authorization and billing experience plus athenahealth or NextGen proficiency.
OpenAI
San Francisco, CA
Leads child safety investigations, enforcement decisions, mandatory-reporting workflows, and process improvements involving sensitive content and abuse signals. The role requires Trust & Safety investigation experience, sound judgment, strong documentation, and cross-functional collaboration.
Gusto
San Francisco, CALead configuration, optimization, reporting, and support for Workday HCM, Payroll, and related modules to power HR and payroll processes at Gusto. Requires 5-7 years of hands-on Workday experience, advanced knowledge of security, business processes, and reporting, plus a bachelor's degree.
Applied Intuition
Sunnyvale, CA
Creates and maintains centimeter-precise HD maps for Level 4 autonomous vehicles using lidar, imagery, and 3D geospatial data. The role requires 3+ years of mapping experience, a bachelor’s degree, and familiarity with autonomous-vehicle mapping standards and tools.
Axle
Rockville, MD
Conduct HIV, cellular, and molecular biology research supporting NIH laboratory programs, including CRISPR/Cas9 gene editing, cell culture, assay development, data interpretation, and statistical analysis. Requires a master's degree and at least five years of laboratory experience.