GRC Program Manager, Audit & Controls

Highlights

• Lead external and certification audits from scoping to closeout and remediation.
• Build reusable common control framework linking risk to evidence and owners.
• Turn repeated audit friction into measurable system improvements.

What they offer

• Equity

Ideal candidate

A technical, product-minded GRC builder who owns audits end-to-end and partners closely with engineers. You question assumptions, think first-principles, and make systems measurably easier to assure.

Requirements

• Direct ownership of meaningful audit, security, customer-assurance, or regulatory outcomes
• Practical knowledge of control design, evidence, testing, operating effectiveness, and remediation
• Technical fluency across cloud systems, identity, logging, APIs, data flows, and system boundaries
• Ability to use Codex or comparable AI-assisted development tools to build, run, inspect, and test a working solution
• Experience using code, SQL, APIs, structured data, automation, or data workflows to solve an operational problem
• Ability to design reusable cross-framework controls without erasing framework-specific test and evidence requirements
• First-principles curiosity, creative problem solving, intellectual humility, and ability to update when facts change
• Product and program judgment: define the user, scope, milestones, ownership, adoption, and measurable outcome
• Clear, constructive partnership with Security, Engineering, Infrastructure, Product, Privacy, Legal, and audit teams