CloudZero
GRC Manager
Boston · Exec · Contract
Sponsorship not specifiedDetected 71 days ago
AWSGCPAzureComplianceSalesLeadershipCommunicationPublic SpeakingCISSP
About the role
- Our customer base is expanding, the regulatory and risk landscape is getting more complex, and the business needs a GRC function that can keep pace.
- This is a high-impact, highly cross-functional role.
- You'll be as comfortable presenting a risk register to leadership as you are helping a sales team close a deal with the right compliance documentation.
Responsibilities
- Design and operate a comprehensive GRC framework spanning governance structures, enterprise risk management, and compliance programs that grows alongside CloudZero's business
- Own audit and certification programs including SOC 2 and other relevant standards, coordinating across internal teams and third-party auditors to drive successful outcomes
- Own the development, maintenance, and ongoing improvement of CloudZero's security and privacy policies and procedures, ensuring they're current, practical, and embedded into how teams actually operate
- Lead regular enterprise risk assessments, maintain a living risk register, and create an environment where risk-informed decision-making happens at every level of the organization
- Serve as a key stakeholder in building CloudZero's AI Governance & Strategic Risk strategy
- Take full ownership of business continuity and disaster recovery programs, including program design, documentation, regular testing cycles, and tabletop exercises - ensuring operational preparedness when it matters most
- Build and manage third-party risk management processes, including vendor due diligence, contract reviews, and ongoing monitoring throughout the vendor lifecycle
- Manage the company's security awareness training program and run internal audits to validate that controls are working as intended
- Own the security questionnaire and assessment process - including VSAs, SIGs, and custom customer requests - with a primary focus on building and scaling tooling and automation that makes high-quality responses fast and repeatable
- Build and maintain a library of pre-approved security responses, compliance artifacts, and contract language so the team isn't starting from scratch on every deal
Requirements
- 5+ years of experience in governance, risk, and/or compliance roles, ideally within a SaaS or cloud technology company
- Working knowledge of established risk management frameworks such as COSO, ISO 31000, or NIST RMF
- Hands-on technical experience with GCP, AWS, or Azure from a security and compliance lens
- Experience working with Vanta or Drata for continuous compliance monitoring and automation
- Experience with security questionnaire automation tools such as Loopio, Iris, or similar solutions
- Familiarity with security frameworks including NIST CSF, CIS Controls, or OWASP
- We believe every engineering decision is a buying decision, and we're applying proven reliability engineering principles to financial efficiency.
Skills
- Cloud cost management is one of the biggest challenges organizations face today.
- CloudZero is a SaaS platform at the intersection of next-generation cloud cost management and FinOps.
- CloudZero is an equal opportunity employer and values diversity.
Company info
- Maintain and continuously improve CloudZero's trust center, ensuring prospective customers have ready access to up-to-date security and compliance documentation
Equal opportunity
- CloudZero is an equal opportunity employer and values diversity. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status or disability status. All job offers are contingent upon the candidate passing background and reference checks.
- We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status or disability status.
- All job offers are contingent upon the candidate passing background and reference checks.
Apply directly at CloudZero →Create a free account for alerts like thisView CloudZero immigration profile
This listing is sourced directly from CloudZero's careers page and normalized into a canonical job model.