GRC Manager

United Statesfull timeRemote

Apply on Employer Site

senior

$139k–$168k

H1B: no

Mattermost GRC Manager at Mattermost to own and modernize governance, risk, and compliance programs across federal and commercial markets. Responsible for compliance posture, certification cycles, risk management, and leading the GRC team.

Responsibilities

Own and modernize Mattermost's compliance programs across federal and commercial markets
Lead readiness, certification, and surveillance cycles across both programs
Operate the risk management program end to end — from identification and assessment through treatment and acceptance
Own the third-party and vendor risk management program, including security assessments and supply chain risk
Apply GRC engineering and automation to replace manual evidence collection with continuous controls monitoring
Build AI-native workflows to accelerate and improve the quality of recurring compliance work
Maintain the control library, system security plans, POA&Ms, and policies
Coordinate external audits from scoping through remediation
Accelerate deal cycles by owning customer security questionnaires, trust center content, and reusable compliance artifacts
Grow and lead the GRC team as the program scales

Qualification

Bachelor's degree in computer scienceExperience with UHow Success Is Measured

Required

Bachelor's degree in computer science, information security, or related field — or significant professional GRC and compliance experience
Proven senior-level experience in governance, risk, and compliance, security compliance, or IT audit, including direct ownership of a certification or authorization program
Experience with U.S. Federal standards including CMMC and NIST series (800-171 / 800-53)
Experience with ISO 27001 and SOC 2 Type II
Experience operating a formal risk management program
Experience running a third-party and vendor risk management program
Experience owning customer-facing security assurance, including security questionnaires and trust center content
Working knowledge of security controls for cloud environments (AWS, GCP, and/or Azure)
Excellent written and verbal communication skills

Preferred

Professional GRC certifications such as CISA, CRISC, CISM, CISSP, or CIPP
Experience working with AI platforms such as Claude, OpenAI, or Gemini
Experience with compliance automation tooling such as Vanta or Drata, and continuous controls monitoring
Direct experience applying AI or LLM-based workflows to GRC tasks
Proficiency in no-code automation or scripting languages
Past success in critical infrastructure industries including defense, cybersecurity, communications, or manufacturing
How Success Is Measured
CMMC Level 2 gap assessment and readiness roadmap delivered within first 90 days

Benefits

Dental
Vision
401(k)
PTO
Parental Leave

Company

Mattermost

View company page

Source: greenhouse

Active within the past hour

Remote-friendly

More roles at Mattermost

Staff Full Stack Engineer

United States

Lead Site Reliability Engineer

United States

Senior Full Stack Engineer

United States

Account Manager - Federal

United States