Sigma is seeking an experienced GRC Manager to lead and scale our governance, risk, and compliance programs. This role is based in our San Francisco office or upcoming New York office and reports to the General Counsel. You'll have the opportunity to build a strategic, enterprise-wide GRC function that enables business growth while managing organizational risk.
Requirements
- Design and implement governance frameworks, including reporting, policy governance, and control oversight
- Establish and maintain enterprise policies, standards, and procedures across technology, security, privacy, and operational functions
- Build and lead a governance committee structure that provides appropriate oversight and decision-making
- Create governance dashboards and metrics to provide visibility into program maturity and effectiveness
- Partner with leadership to align governance activities with business strategy and risk appetite
- Develop and operate a comprehensive Enterprise Risk Management (ERM) program
- Conduct regular enterprise-wide risk assessments and maintain a dynamic risk register
- Build and maintain business continuity and disaster recovery programs, including regular testing and tabletop exercises
- Implement third-party risk management processes, including vendor risk assessments, contract reviews, and ongoing monitoring
- Create risk treatment plans and track remediation activities across the organization
- Facilitate risk-informed decision-making at all levels of the organization
- Coordinate with functional leaders to ensure risks across all business areas are identified and managed appropriately
- Own audit and certification programs including SOC 2, ISO 27001, HIPAA, and other relevant standards
- Develop and maintain compliance monitoring programs to track regulatory changes and work with the legal team to assess impact
- Partner with HR and Legal to support labor & employment compliance programs, including workplace safety, anti-discrimination, wage and hour requirements, and multi-jurisdictional employment regulations
- Monitor and ensure adherence to industry-specific regulatory requirements relevant to Sigma's business operations
- Manage security awareness training programs enterprise-wide
- Conduct internal audits and assessments to validate control effectiveness
- Coordinate external audits and assessments with third-party auditors
- Support sales and customer success teams with compliance documentation and security inquiries
- Develop customer-facing materials that articulate Sigma's risk management and compliance posture
- Complete and manage responses to customer security questionnaires and assessments (VSAs, SIGs, custom questionnaires)
- Enable efficient deal cycles by maintaining ready-to-use compliance artifacts, trust center content, and documentation
- Partner with Sales Engineering and Solutions teams to address prospect security and compliance requirements
Benefits
- Equity
- Generous health benefits
- Flexible time off policy
- Paid bonding time for all new parents
- Traditional and Roth 401k
- Commuter and FSA benefits
- Lunch Program
- Dog friendly office
