{"id":3833843,"url":"https://alion.io/job/superhuman-grc-program-manager","title":"GRC Program Manager","company":{"id":4056,"name":"Superhuman","domain":"superhuman.com","url":"https://alion.io/company/superhuman","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":81,"open_postings":13,"ghost_share":0,"stale_share":0.769,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Management","role_family":"Management","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":133000,"max":182500,"currency":"USD","period":"year","gross":null,"usd_annual":182500},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-05T16:22:40Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-07T07:21:26Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Superhuman offers a dynamic hybrid working model for this role. This flexible approach gives team members the best of both worlds: plenty of focus time along with in-person collaboration that helps foster trust, innovation, and a strong team culture.\nAbout Superhuman\nGrammarly is now part of Superhuman, the AI productivity platform on a mission to unlock the superhuman potential in everyone. The Superhuman suite of apps and agents brings AI wherever people work, integrating with over 1 million applications and websites. The company’s products include Grammarly’s writing assistance, Superhuman Docs's collaborative workspaces, Mail’s inbox management, and Go, the proactive AI assistant that understands context and delivers help automatically. Founded in 2009, Superhuman empowers over 40 million people, 50,000 organizations, and 3,000 educational institutions worldwide to eliminate busywork and focus on what matters. Learn more at superhuman.com and about our values here.\nThe Opportunity\nYou’ll help run Superhuman’s unified audit program: quarterly audit activities across SOC 2, the ISO 27000 family, ISO 42001, and our other certifications. You’ll work with our audit firms, GRC Partners, and control owners across Superhuman, and plan new audits as we expand to new frameworks, platforms, and regions. You’ll also run gap assessments that show what each expansion will take before we commit.\nYou’ll build the audit operating model and runbook, and drive automation so evidence can be collected and reused across frameworks where possible, requests to control owners are streamlined, and each audit cycle takes less effort than the last. Building with AI tools is a normal part of the job, with appropriate human oversight.\nThis is an individual contributor role for a program manager who communicates clearly, manages competing priorities, and enjoys simplifying complex processes.\nKey responsibilities\nRun the audit program as one program: an integrated plan and calendar across audits and expansions, with milestones, dependencies, risks, and decisions tracked, and regular status updates to GRC leadership and stakeholders.\n\nPlan and run quarterly audits from scoping through report and findings closeout, including readiness ahead of each fieldwork window (control owner prep, evidence pre-checks, walkthrough dry runs).\n\nScope each audit’s boundary with Product and Engineering, and flag when a launch or new platform changes it.\n\nBuild and maintain the audit operating model and runbook as the program grows.\n\nDrive automation of evidence collection, request tracking, and audit reporting. Work with GRC Engineering on new ways to generate and collect evidence, and reuse evidence and walkthroughs across frameworks where applicable.\n\nPartner with GRC and Procurement on third-party risk management across the vendor lifecycle.\n\nAlign audit windows across frameworks and firms to minimize duplicate evidence requests to control owners.\n\nPlan new audits and expansions, and run framework and scope evaluations and gap assessments with recommendations and effort estimates leadership can act on.\n\nWork with control owners and GRC Partners to deliver evidence and close findings, and coordinate with GRC Partners on findings requiring extended remediation.\n\nManage day-to-day auditor relationships, and report audit status, findings, and program metrics to GRC leadership.\n\nMinimum qualifications\n5+ years of program management experience running multi-workstream programs with plans, milestones, dependencies, risk tracking, and leadership reporting.\n\n5+ years running external security audits (SOC 2 and ISO 27001 at minimum), at a company or an audit firm, including seasons with several frameworks at once.\n\nWorking knowledge of SOC 2, the ISO 27000 family, ISO 42001, and PCI-DSS and where their requirements overlap.\n\nExperience leading a gap assessment for a new framework or scope change and presenting the result to leadership.\n\nExperience building or improving an audit process: calendars, request tracking, runbooks, roles and responsibilities.\n\nTechnical fluency to understand how evidence is produced in cloud environments, assess the completeness and accuracy of system-generated reports, and identify opportunities for automation using AI tools.\n\nAbility to communicate clearly, manage competing priorities, and proactively resolve blockers during time-sensitive audit cycles.\n\nDemonstrated ability to influence cross-functional stakeholders, establish accountability, and drive deliverables without direct reporting authority.\n\nPreferred qualifications\nExperience managing complex external audits in an in-house GRC function, consulting environment, or audit firm.\n\nFamiliarity with additional frameworks such as ISO 42001, PCI DSS, ISO 27701 or 27018, CSA STAR, or international schemes (for example, IRAP, ISMAP, or C5).\n\nExperience automating evidence collection or audit reporting, or using LLMs day-to-day to plan, track, and report on program work.\n\nExperience with a GRC platform or building lightweight internal tooling.\n\nCompensation and Benefits\nSuperhuman offers all team members competitive pay along with a benefits package encompassing the following and more:\nExcellent health care (including a wide range of medical, dental, vision, mental health, and fertility benefits)\n\nDisability and life insurance options\n\n401(k) and RRSP matching\n\nPaid parental leave\n\n20 days of paid time off per year, 12 days of paid holidays per year, two floating holidays per year, and flexible sick time\n\nGenerous stipends (including those for caregiving, pet care, wellness, your home office, and more)\n\nAnnual professional development budget and opportunities\n\nSuperhuman takes a market-based approach to compensation, so base pay may vary by location. Our US locations are categorized into two compensation zones based on proximity to our hub locations.\nFor more information about our compensation zones and locations where we currently support employment, please refer to this page. If a location of interest is not listed, please speak with a recruiter for additional information.\nWe encourage you to apply\nAt Superhuman, we value our differences, and we encourage all to apply-especially those whose identities are traditionally underrepresented in tech organizations. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, ancestry, national origin, citizenship, age, marital status, veteran status, disability status, political belief, or any other characteristic protected by law. Superhuman is an equal opportunity employer and a participant in the US federal E-Verify program (US). We also abide by the Employment Equity Act (Canada).","description_format":"text","description_chars":6733,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Home office","Hybrid work","Life insurance","Parental leave","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["LLM & Generative AI","Natural Language Processing","Office & Productivity Software"],"lifecycle":[{"event":"open","at":"2026-11-05T20:18:32Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 53 · green card filings: 11","filings_12m":53,"filings_prev_12m":37,"green_card_filings_12m":11,"median_offered_wage_usd":210547,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":49,"reasons":["conf:2","stale_co","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":182500,"is_top_pay":true},"html_url":"https://alion.io/job/superhuman-grc-program-manager","json_url":"https://alion.io/job/superhuman-grc-program-manager.json","meta":{"generated_at":"2026-11-07T10:16:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9029,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4056},"rest":"https://alion.io/mcp/rest/get_company?id=4056"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsuperhuman-grc-program-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsuperhuman-grc-program-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsuperhuman-grc-program-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/superhuman-grc-program-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsuperhuman-grc-program-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3833843}},{"tool":"search_jobs","arguments":{"company":"superhuman.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3833843},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}