Governance, Risk & Compliance (GRC) Manager

Responsibilities

• Design and implement enterprise-wide governance frameworks, including policy governance and control oversight
• Develop and operate a comprehensive Enterprise Risk Management (ERM) program and maintain a dynamic risk register
• Own audit and certification programs such as SOC 2, ISO 27001, and HIPAA
• Implement third-party risk management processes, including vendor assessments and contract reviews
• Build and maintain business continuity and disaster recovery programs
• Support sales and customer success teams by managing security questionnaires and compliance documentation
• Partner with Legal, Engineering, and HR to ensure adherence to data privacy (GDPR, CCPA) and employment regulations

Requirements

• 4+ years of experience in governance, risk management, or compliance roles, preferably in SaaS or technology
• Demonstrated experience building or maturing a GRC program from the ground up
• Proven track record of leading certification audits (SOC 2, ISO 27001, HIPAA, or similar)
• Experience implementing risk management frameworks (COSO, ISO 31000, NIST RMF, or similar)
• Strong knowledge of data privacy regulations including GDPR and CCPA
• Excellent communication skills with the ability to influence stakeholders at all levels

Preferred Qualifications

• Experience with GRC platforms (ServiceNow GRC, Archer, LogicGate, etc.)
• Hands-on experience with cloud environments (GCP, AWS, Azure)
• Experience with continuous compliance automation tools (Vanta, Drata, etc.)
• Professional certifications such as CISA, CISM, CISSP, or CIPP
• Background in both technical and operational risk management

Benefits

• Equity
• Generous health benefits
• Flexible time off policy
• Paid bonding time for all new parents
• Traditional and Roth 401k
• Commuter and FSA benefits
• Lunch Program
• Dog friendly office

About the Company

Sigma is the AI Apps and agentic analytics platform built on the cloud data warehouse. Business and technical teams use Sigma to explore live data, build intelligent applications, and automate critical workflows all without moving data or breaking governance. Sigma is trusted by more than 2,000 customers, including AMD, Duolingo, Colgate-Palmolive, and JPMorgan Chase.