Tech Stack

Description

You will lead and scale the GRC function at Sigma Computing, building a strategic enterprise-wide program that enables business growth while managing risk. You will partner with Legal, Engineering, Product, Sales, and Operations to develop governance frameworks, risk management processes, and compliance programs.

Requirements

• 4+ years experience in governance, risk management, or compliance roles, preferably in SaaS or technology
• Experience building or maturing a GRC program from the ground up
• Track record of leading certification audits (SOC 2, ISO 27001, HIPAA, or similar)
• Strong knowledge of data privacy regulations (GDPR, CCPA, etc.)
• Excellent communication skills with ability to influence stakeholders at all levels

Responsibilities

• Design and implement governance frameworks, reporting, policy governance, and control oversight
• Develop and operate a comprehensive Enterprise Risk Management (ERM) program
• Own audit and certification programs including SOC 2, ISO 27001, HIPAA, and other relevant standards
• Support sales and customer success teams with compliance documentation and security inquiries
• Build and maintain business continuity and disaster recovery programs