SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Baseten is an AI infrastructure company that powers mission-critical inference for leading AI companies like Cursor, Notion, and Abridge. The company recently raised $1.5B in Series F funding and is building the platform engineers use to ship AI products at scale.
As GRC Manager, you will be an early member of Baseten's security organization, responsible for building and enhancing the company's governance, risk, and compliance programs. You'll work across Engineering, Product, Security, and Legal to ensure the platform meets the highest standards for privacy, trust, and regulatory compliance.
Key responsibilities include:
• Translating regulatory, framework, and customer requirements into product requirements and technical controls, partnering with Engineering and Product to embed compliance into platform design.
• Designing and implementing security governance frameworks, policies, and procedures aligned with Baseten's risk posture and industry best practices.
• Building and managing a company-wide risk assessment program to identify, track, and mitigate security and compliance risks.
• Supporting compliance efforts for SOC 2, ISO 27001/27701, HIPAA, FedRAMP, and other applicable standards.
• Coordinating external audits and certification processes, including evidence collection, control validation, and remediation.
• Overseeing vendor security assessments and third-party risk management.
• Supporting customer security questionnaires, due diligence, and documentation requests.
• Developing security and compliance training to ensure company-wide understanding of policies and responsibilities.
• Staying current on evolving regulatory requirements and leading initiatives to mature compliance and risk management programs.
You will report to leadership and collaborate closely with technical and non-technical stakeholders to embed compliance and risk management into day-to-day operations.
REQUIREMENTS:
• BS degree in Computer Science, Computer Engineering, Management Information Systems, or equivalent field.
• 5+ years of experience in GRC, Security Compliance, or Information Security roles, ideally in a SaaS or cloud-native environment.
• Strong understanding of security frameworks and standards such as SOC 2, ISO 27001, NIST, and GDPR.
• Proven track record managing compliance audits and certification programs end-to-end.
• Experience working directly with leaders and executives within Enterprise organizations.
• Experience working cross-functionally with technical and non-technical stakeholders to implement compliance and security controls.
• Proven experience driving product compliance by translating regulatory and customer requirements into actionable product controls with Engineering and Product teams.
• Experience defining project requirements and driving implementation by translating compliance objectives into clear deliverables, coordinating cross-functional stakeholders, and managing execution through completion.
• Experience responding to customer security questionnaires and leading customer security interviews, with the ability to clearly communicate security controls, compliance posture, and risk management practices to both technical and nontechnical audiences.
• Ability to thrive in a fast-paced, high-growth startup environment while maintaining structure and process discipline.
NICE TO HAVE:
• Experience with cloud security compliance in AWS or GCP environments.
• Hands-on experience using GRC tools (e.g., Vanta, Drata, Secureframe, Anecdotes).
• Understanding of AI/ML security considerations, data privacy, and model governance.
• Previous experience building and implementing security controls in an early-stage or rapidly growing startup.
• Relevant certifications (e.g., CISA, CISSP, CISM, ISO 27001 Lead Implementer).
