Clay
GRC Program Manager
$150K–$200K
New York +1 · Hybrid · Manager · Full-time · Posted Oct 21, 2026
- Location
- New York
San Francisco - Experience
- 5+ years building and scaling operational programs, ideally in a SaaS or tech environment.
- Education
- Bachelor's degree in Information Security, Business, or a related field (or equivalent experience).
About the job
Builds and owns operational programs for vendor management, data privacy, and security compliance, partnering across teams to support customer and company needs.
What you'll do
- Own vendor onboarding reviews, including DPA and data compliance checks, subprocessor updates, and customer notifications.
- Manage external GRC vendors and compliance reviews, including intake, ticketing, SLAs, and performance metrics.
- Build scalable compliance processes and respond to customer security and privacy questionnaires.
What they ask for
- Bachelor's degree in Information Security, Business, or a related field (or equivalent experience).
- Understanding of privacy laws and frameworks such as GDPR and CCPA/CPRA.
- Experience with vendor risk assessments, security questionnaires, and DPA/subprocessor management.
- Familiarity with DSAR processes and compliance tools such as Vanta, Transcend, or similar platforms.
Nice to have
- Knowledge of additional standards such as ISO 27001 and SOC 2.
- Experience with data mapping, privacy impact assessments (PIAs), or privacy-related incident response.
Pay
$150K – $200K (base salary)
Tools
GDPR, CCPA/CPRA, Vanta, Transcend, ISO 27001, SOC 2
Model-written summary · the original posting is authoritative