GRC Program Manager
$90,000–$160,000 year
On-siteWashington, United States
Job Summary
Design and continuously improve compliance processes and frameworks to scale GRC operations across Commercial, International, and US Government environments. Serve as connective tissue across teams, translating regulatory requirements into actionable workflows and ensuring accountability at every stage of the compliance lifecycle. Coordinate internal and external audit cycles, including FedRAMP, SOC 2, and ISO 27001, while tracking project states and resolving issues that may steer initiatives off-course. Synthesize compliance goals from product vision, triaging field requests to create maximum focus for the team and escalating items requiring immediate attention. Work with customer-facing engineering teams on the adoption and support of compliance-related product features and certifications. This role partners with compliance engineers, security teams, and developers to maintain the highest regulatory standards for Palantir's data-driven decision platforms.
Required Qualifications
- Demonstrated success managing compliance programs for an enterprise software company, startup or other company
- Experience with multiple GRC frameworks and standards, such as SOC 2, ISO 27001, IRAP or ENS
- Experience in USG-specific frameworks: FedRAMP, NIST 800-53, DoD CC SRG, FISMA, or CMMC
- Excellent judgment and composure in high-pressure situations, including during active audits or compliance incidents
- A creative approach to project management centered around lightweight frameworks that enable rapid iteration, while operating in harmony with a larger development and compliance organization
- An ability to develop strong relationships with key internal stakeholders (including customer-facing teams), auditors, and regulators, with a high level of empathy for our end-users' needs
- Meticulous attention to detail, including holding tightly to your team's compliance and product quality bar
- A proven track record of building and scaling compliance processes from the ground up, particularly in USG-regulated environments
- Experience with risk management methodologies, including maintaining risk registers, conducting risk assessments, and managing third-party or vendor risk programs
- Willingness and eligibility to obtain a U.S. security clearance
- This role requires that you work from the country listed on this job posting
- You are based within a commutable distance of your local Palantir office
Desired Qualifications
- Willingness and eligibility to obtain a U.S. security clearance preferred
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.