Governance Risk Compliance (GRC) Manager

About the Company

Antithesis provides a platform that helps engineering teams identify and resolve bugs that traditional testing approaches miss. By running entire systems in a deterministic simulation, they allow teams to debug faster and ship with greater confidence.

Responsibilities

• Own the SOC 2 audit end-to-end and serve as the primary liaison with external auditors
• Maintain the Vanta instance and the evidence repository
• Maintain and improve the policy library and run the GRC calendar
• Manage the inbound security questionnaire queue to support enterprise sales
• Maintain the risk register and lead regular risk review cadences
• Support penetration testing, vulnerability management, and security architecture remediation
• Lay groundwork for future frameworks like ISO 27001, GDPR, or FedRAMP

Requirements

• 3–5 years of GRC, compliance, or IT audit experience in a SaaS or technical environment
• Hands-on experience owning multiple SOC 2 audits
• Technical background in SRE, security engineering, or equivalent
• Experience with AWS, GCP, and Infrastructure as Code (IaC)
• Ability to understand complex technical architectures including NixOS
• Strong written communication skills for policy writing and customer-facing interactions

Preferred Qualifications

• Relevant certifications such as CISA, CISSP, CISM, or CCSK
• Familiarity with ISO 27001, GDPR, or FedRAMP frameworks
• Experience using GRC tools, specifically Vanta
• Experience supporting Legal on DPAs or commercial security schedules