Latest AI JobsBrowse Jobs
Mattermost logo

GRC Manager

MattermostUnited StatesSecurity
Apply on company site
Salary
$139,254 - $168,318 USD
Job type
Full-time
Posted
2 Jul 2026
Status
Open · checked 7d ago

About this role

The GRC Manager position at Mattermost in the United States offers an opportunity to lead and modernize governance, risk, and compliance programs across federal and commercial markets. This role is ideal for a seasoned security compliance professional looking to build an automated, AI-native approach to regulatory standards and risk management.

Role Overview

Mattermost seeks a GRC Manager to take full ownership of the end-to-end compliance posture across federal and commercial landscapes. This position centers on engineering-led compliance, replacing manual effort with GRC engineering, automation, and AI workflows. The individual in this role will guide readiness and certification cycles, manage the internal control library, and coordinate external audits. Success in the first 90 days includes delivering a CMMC Level 2 gap assessment and keeping SOC 2 Type II and ISO 27001 audit timelines on track.

Key Responsibilities

Own and modernize compliance programs across commercial and federal markets, including managing surveillance cycles and readiness.
Operate the comprehensive risk management program from identification through treatment and acceptance.
Manage the third-party and vendor risk program, executing security assessments and supply chain evaluations.
Implement GRC engineering and automation to transition from manual evidence collection to continuous controls monitoring.
Build AI-native workflows to boost efficiency and quality in recurring compliance tasks.
Maintain system security plans, control libraries, policies, and POA&Ms.
Oversee external audits from initial scoping through final remediation.
Accelerate sales cycles by managing customer security questionnaires, trust center content, and compliance artifacts.
Build and lead the internal GRC team as the program expands.

Requirements

Bachelor's degree in computer science, information security, or a related discipline, or substantial professional experience in compliance and GRC.
Demonstrated senior-level background in governance, risk, and compliance, IT audit, or security compliance, featuring direct ownership of authorization or certification programs.
Familiarity with U.S. Federal standards such as NIST 800-171, NIST 800-53, and CMMC.
Hands-on experience with ISO 27001 and SOC 2 Type II.
Background running formal risk management and third-party vendor risk programs.
Experience managing customer-facing security assurance assets like trust centers and security questionnaires.
Working knowledge of cloud environment security controls across AWS, Azure, or GCP.
Excellent verbal and written communication skills.
U.S. citizenship, location within the United States, and the eligibility to obtain and maintain a U.S. government security clearance, alongside compliance with U.S. export control laws.

Nice to Have

Professional credentials such as CISSP, CISM, CRISC, CISA, or CIPP.
Practical background utilizing AI platforms like Gemini, OpenAI, or Claude.
Experience with compliance automation platforms such as Drata or Vanta, alongside continuous controls monitoring.
Direct application of AI or LLM-driven workflows to GRC processes.
Proficiency in scripting languages or no-code automation.
Previous background in critical infrastructure fields including cybersecurity, defense, manufacturing, or communications.

Skills and Tools

AWS, GCP, and Azure cloud environments
LLM and AI platform integration
GRC automation and continuous monitoring tools
NIST, CMMC, SOC 2, and ISO 27001 frameworks

Salary and Benefits

Target annual salary range of $139,254 to $168,318 USD, determined via a market-based approach considering qualifications, skills, and location.
Mission-driven work supporting critical infrastructure and defense organizations.
Remote-first working culture within a globally distributed team.

About the Company

Mattermost builds the leading collaborative workflow platform utilized in defense, intelligence, security, and critical infrastructure sectors. Trusted by Fortune 500 companies and the U.S. Department of War, the platform operates securely on-premises and in private clouds with full operational control.

How to Apply

Interested candidates should visit the official Mattermost careers page to submit an application for this remote United States role.

Skills and tech stack

AWSGCPAzureLLM

Questions candidates ask

What is the salary range for the GRC Manager position?

The target salary range is $139,254 to $168,318 USD per year, depending on factors such as location, skills, and experience.

Is this a remote position?

Yes, this role is remote-first, but candidates must be located in the United States and meet specific citizenship and security clearance eligibility requirements.

What citizenship or clearance requirements apply to this role?

Applicants must hold U.S. citizenship, reside in the United States, be eligible to obtain and maintain a U.S. government security clearance, and meet export control law requirements.

What frameworks and standards are relevant to this role?

Candidates should have experience with U.S. Federal standards such as NIST 800-171, NIST 800-53, and CMMC, as well as ISO 27001 and SOC 2 Type II.

What are the primary goals for the first 90 days?

Success is measured by delivering a CMMC Level 2 gap assessment and readiness roadmap, and keeping SOC 2 Type II and ISO 27001 audit cycles on time.

Ready to apply?

The application is on the official Mattermost careers page.

Apply on company site