# GRC Manager

**Company:** [Mattermost](https://hotfix.jobs/companies/mattermost)
**Location:** Remote
**Role:** Other
**Salary:** $139k – $168k/yr
**Experience:** 7+ years
**Skills:** GRC, Cmmc, Nist 800-171, Nist 800-53, ISO 27001, SOC 2, Risk Management, Vendor Risk Management, AWS, GCP, Azure, Compliance Automation, Vanta, Drata, Cissp
**Posted:** 2026-07-02

> Own and modernize Mattermost's end-to-end GRC program across federal (CMMC/NIST) and commercial (SOC 2/ISO 27001) markets. Apply GRC engineering, automation, and AI to replace manual processes with continuous monitoring while leading risk management, audits, customer assurance, and team growth.

## Job Description

## What You'll Do
- Own and modernize Mattermost's compliance programs across federal and commercial markets
- Lead readiness, certification, and surveillance cycles across both programs
- Operate the risk management program end to end — from identification and assessment through treatment and acceptance
- Own the third-party and vendor risk management program, including security assessments and supply chain risk
- Apply GRC engineering and automation to replace manual evidence collection with continuous controls monitoring
- Build AI-native workflows to accelerate and improve the quality of recurring compliance work
- Maintain the control library, system security plans, POA&Ms, and policies
- Coordinate external audits from scoping through remediation
- Accelerate deal cycles by owning customer security questionnaires, trust center content, and reusable compliance artifacts
- Grow and lead the GRC team as the program scales

## What We're Looking For
- Bachelor's degree in computer science, information security, or related field — or significant professional GRC and compliance experience
- Proven senior-level experience in governance, risk, and compliance, security compliance, or IT audit, including direct ownership of a certification or authorization program
- Experience with U.S. Federal standards including CMMC and NIST series (800-171 / 800-53)
- Experience with ISO 27001 and SOC 2 Type II
- Experience operating a formal risk management program
- Experience running a third-party and vendor risk management program
- Experience owning customer-facing security assurance, including security questionnaires and trust center content
- Working knowledge of security controls for cloud environments (AWS, GCP, and/or Azure)
- Excellent written and verbal communication skills

## Nice to Have
- Professional GRC certifications such as CISA, CRISC, CISM, CISSP, or CIPP
- Experience working with AI platforms such as Claude, OpenAI, or Gemini
- Experience with compliance automation tooling such as Vanta or Drata, and continuous controls monitoring
- Direct experience applying AI or LLM-based workflows to GRC tasks
- Proficiency in no-code automation or scripting languages
- Past success in critical infrastructure industries including defense, cybersecurity, communications, or manufacturing

## How Success Is Measured
- CMMC Level 2 gap assessment and readiness roadmap delivered within first 90 days
- SOC 2 Type II and ISO 27001 audit cycles completed on time without slippage
- Manual evidence collection replaced with automated, continuously monitored controls
- Customer security questionnaires and trust center content maintained to unblock deal cycles
- GRC team grown and operating as a scalable, program-driven function

## Similar roles

- [Senior Technical Underwriter](https://hotfix.jobs/jobs/b3adbf22-96a1-4769-885d-be5af837a584) - Bestow - Remote - $140k – $160k/yr
- [Senior SEO Manager - Citation Outreach](https://hotfix.jobs/jobs/788b9ddf-ead5-4885-935d-1646a09acb88) - Huntress - Remote - $140k – $150k/yr
- [Senior Procurement Officer](https://hotfix.jobs/jobs/a2013470-4efb-4b3b-a1d0-789f40bf335d) - Runpod - Remote - $140k – $180k/yr
- [Regional HSE Manager, Data Centers](https://hotfix.jobs/jobs/6beb15d3-0a2d-4fcd-97fe-f8d56296b766) - Fluidstack - Buffalo, NY - $140k – $200k/yr
- [Senior Credit Analyst](https://hotfix.jobs/jobs/5bac578d-0e2b-40be-8a8c-b894bfddbde4) - Parker - New York, NY - $140k – $160k/yr

**Apply:** https://hotfix.jobs/jobs/5f1e14af-2ed4-49fc-95c9-33e37c7ef0f0
**Canonical:** https://hotfix.jobs/jobs/5f1e14af-2ed4-49fc-95c9-33e37c7ef0f0