Product Compliance and GRC Lead

Location: San Francisco, United States; hybrid

Salary: $150K–$250K per year plus equity

Company

Baseten provides infrastructure, applied AI research, and developer tooling that help AI companies deploy mission-critical inference products.

What you will do

• Translate regulatory, framework, and customer requirements into product requirements and technical security controls.
• Design and maintain security governance frameworks, policies, and procedures.
• Build and manage company-wide security and compliance risk assessments.
• Coordinate SOC 2, ISO 27001/27701, HIPAA, FedRAMP, and other audits and certification processes.
• Oversee vendor security assessments and customer security questionnaires, due diligence, and assurance requests.
• Develop security and compliance training and lead continuous improvement initiatives.

Requirements

• BS degree in Computer Science, Computer Engineering, MIS, or an equivalent field.
• 5+ years of experience in GRC, security compliance, or information security, ideally in a SaaS or cloud-native environment.
• Strong understanding of SOC 2, ISO 27001, NIST, GDPR, and related security frameworks and standards.
• Experience managing compliance audits and certification programs end to end.
• Experience translating regulatory and customer requirements into product controls and driving implementation with Engineering and Product.
• Experience communicating security controls, compliance posture, and risk practices to technical and non-technical stakeholders.

Nice to have

• Cloud security compliance experience in AWS or GCP.
• Hands-on experience with GRC tools such as Vanta, Drata, Secureframe, or Anecdotes.
• Understanding of AI/ML security, data privacy, and model governance.
• Experience building security controls in an early-stage or rapidly growing startup.
• CISA, CISSP, CISM, or ISO 27001 Lead Implementer certification.

Culture & Benefits

• Competitive compensation with meaningful equity.
• U.S. employees and dependents receive full medical, dental, and vision coverage.
• Flexible PTO and a company-wide winter break.
• Paid parental leave and a fertility and family-building stipend.
• U.S. employees have access to a company-facilitated 401(k).
• Exposure to AI and ML startups through the company’s customer network.