Governance, Risk & Compliance (GRC) Manager

Responsibilities

• Design and implement enterprise-wide governance frameworks, including policy governance and control oversight
• Develop and operate a comprehensive Enterprise Risk Management (ERM) program and maintain a dynamic risk register
• Lead audit and certification programs such as SOC 2, ISO 27001, and HIPAA
• Implement third-party risk management processes, including vendor assessments and contract reviews
• Build and maintain business continuity and disaster recovery programs
• Support sales and customer success teams by managing security questionnaires and compliance documentation
• Partner with Legal, Engineering, and HR to ensure regulatory compliance across all business functions

Requirements

• 4+ years of experience in governance, risk management, or compliance roles, preferably in SaaS or technology
• Demonstrated experience building or maturing a GRC program from the ground up
• Proven track record of leading certification audits (SOC 2, ISO 27001, HIPAA, or similar)
• Experience implementing risk management frameworks (COSO, ISO 31000, NIST RMF, or similar)
• Strong knowledge of data privacy regulations including GDPR and CCPA
• Excellent communication skills with the ability to influence stakeholders at all levels

Preferred Qualifications

• Experience with GRC platforms such as ServiceNow, Archer, or LogicGate
• Hands-on experience with cloud environments (GCP, AWS, or Azure)
• Experience with continuous compliance automation tools like Vanta, Drata, or Secureframe
• Professional certifications such as CISA, CISM, CISSP, or CIPP

Benefits

• Equity
• Generous health benefits
• Flexible time off policy
• Paid bonding time for all new parents
• Traditional and Roth 401k
• Commuter and FSA benefits
• Lunch Program
• Dog friendly office

About the Company

Sigma is the AI Apps and agentic analytics platform built on the cloud data warehouse. Business and technical teams use Sigma to explore live data, build intelligent applications, and automate critical workflows. Sigma is trusted by more than 2,000 customers, including AMD, Duolingo, Colgate-Palmolive, and JPMorgan Chase.