Governance & Policy Development: Design, implement, and maintain security governance frameworks, policies, and procedures that align with Baseten’s risk posture and industry best practices.
Risk Management: Build and manage the company-wide risk assessment program, identifying, tracking, and mitigating key security and compliance risks.
Compliance Operations: Lead efforts to achieve and maintain compliance with SOC 2, ISO 27001, GDPR, and other applicable standards and regulations.
Audit & Certification Management: Coordinate external audits and certification processes, ensuring evidence collection, control validation, and remediation plans are executed efficiently.
Third-Party Risk Management: Oversee vendor security assessments and ensure third-party providers meet Baseten’s security and compliance standards.
Cross-Functional Collaboration: Partner with Engineering, Product, and Operations teams to embed compliance and risk management into day-to-day operations and technical processes.
Customer Trust & Assurance: Support customer security questionnaires, due diligence efforts, and documentation requests from prospective and existing clients.
Training & Awareness: Develop and deliver security and compliance training to ensure company-wide understanding of key policies and responsibilities.
Continuous Improvement: Stay current on evolving regulatory requirements and lead initiatives to mature our compliance and risk management programs.
Requirements
5+ years of experience in GRC, Security Compliance, or Information Security roles, ideally in a SaaS or cloud-native environment.
Strong understanding of security frameworks and standards such as SOC 2, ISO 27001, NIST, and GDPR.
Proven track record managing compliance audits and certification programs end-to-end.
Familiarity with risk management methodologies, control design, and governance frameworks.
Experience working cross-functionally with technical and non-technical stakeholders to implement compliance controls.
Excellent organizational, documentation, and communication skills with attention to detail.
Ability to thrive in a fast-paced, high-growth startup environment while maintaining structure and process discipline.
Benefits
Competitive compensation, including meaningful equity.
100% coverage of medical, dental, and vision insurance for employee and dependents
Generous PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!)
Paid parental leave
Company-facilitated 401(k)
Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities.
Regulatory Policy Specialist developing regulatory case filings and strategies at Xcel Energy. Collaborating with senior management to ensure compliance and effective communication with stakeholders.
Lead, Insurance Product Compliance offering guidance on compliance risks and solutions for insurance underwriting. Collaborate with stakeholders and perform data analysis to recommend compliance actions.
Compliance Manager overseeing Fair Lending Program at Regions Bank. Directing compliance reviews, advising leadership, and managing training and oversight initiatives.
Commercial Compliance Analyst supporting launch and compliance of commercial field teams at Syneos Health. Collaborating across teams to ensure adherence to regulatory requirements and develop training.
Compliance Analyst responsible for operational execution of licensing program for Nuvei. Handling regulatory reporting, license maintenance, and governance metrics.
Partner Commercial Manager focusing on license compliance strategies for AVEVA’s software revenues in India. Collaborate with sales and legal teams to ensure compliance and drive growth.
Compliance Assistant Manager supporting FTSE Russell operations and compliance frameworks at LSEG. Driving regulatory excellence with key responsibilities in risk management and governance.
Legal Compliance Officer at juris GmbH focusing on central compliance requirements and legal standards. Engaging with management to strengthen legal security and implement compliance in processes.
Compliance Officer supporting implementation of compliance frameworks in TRATON Financial Services. Collaborating across departments and focusing on AML and GDPR compliance in Romanian and Bulgarian markets.
Manager of Privacy & Data Compliance at Constellation Brands overseeing privacy operations and ensuring data protection across teams. Collaborating with business units to maintain regulatory compliance and manage risks.