GRC and Security Program Manager

ABOUT THE ROLE:

• Be the first dedicated owner of GRC and internal security at Close, building programs from the ground up.
• Automate evidence, codify processes, and use AI aggressively to scale security practices.
• Earn and maintain customer trust through rigorous security and compliance work.

YOU ARE:

• A hands-on operator with 5+ years building Security & Trust programs at a 50–300 person company.
• Technical enough to reason about SSO/IAM, trace data flows, and investigate incidents via logs.
• Automation and efficiency minded, with an AI-positive approach to risk management.

YOU WILL:

• Run and automate our GRC program, including SOC 2 audits, risk assessments, and vendor reviews.
• Own identity and device security, from SSO strategy to MDM and access reviews.
• Build customer-facing trust resources and coordinate product security audits with engineering.

BENEFITS:

• ~5 weeks PTO to start plus a 1-week all-company Winter Holiday Break and paid US holidays.
• Paid parental leave and a 1-month sabbatical every 5 years.
• Competitive pay, goal-based bonus, and 80% work option for a 4-day week.