Redo
GRC Program Manager
Draper, UT, US · Manager · Full-time · Posted Aug 14, 2026
- Experience
- 5+ years; no alternatives stated.
About the job
Own and scale Redo’s governance, risk, and compliance program, including audits, engineering controls, merchant security reviews, and AI-enabled compliance automation.
What you'll do
- Manage compliance frameworks, audit readiness, evidence collection, continuous control monitoring, policies, and vendor risk.
- Partner with engineering to implement controls; handle merchant security reviews and communicate compliance posture to stakeholders.
- Use AI and GRC tooling to automate compliance work, including evidence collection, control monitoring, questionnaires, and documentation.
What they ask for
- 5+ years in GRC, security compliance, or a closely related role, with hands-on ownership of at least one full compliance program.
- Experience leading a company through full SOC 2 certification and continued surveillance.
- Experience supporting GDPR and data privacy obligations for SaaS platforms.
- Ability to translate control requirements into engineering requirements and collaborate with software engineers.
Nice to have
- CISA, CISSP, ISO 27001 Lead Implementer/Auditor, or CIPP/E certifications.
- Experience with HIPAA or PCI, or GRC automation platforms such as Vanta, Drata, or Secureframe.
Tools
SOC 2, GDPR, CCPA, HIPAA, PCI, Vanta, Drata, Secureframe
AI focus
Lead AI enablement of compliance, automating evidence collection, control monitoring, security-questionnaire responses, and documentation; experience using AI for custom compliance automation is required.
Model-written summary · the original posting is authoritative