Director, GRC, Engineering (Remote Eligible)
Smartsheet is seeking an experienced leader to serve as the Director of Governance, Risk, and Compliance (GRC) Engineering. This role is pivotal in maintaining and enhancing the company's cybersecurity program, ensuring continuous improvement and fostering trust with customers. The Director will lead the GRC team, collaborate across the organization, and report directly to the Chief Information Security Officer (CISO).
Key responsibilities include automating GRC processes, implementing GRC-as-Code and Policy-as-Code, and integrating AI into GRC workflows. The Director will oversee annual audits such as SOC2, ISO 27001, ISO 27701, and FedRAMP, serving as the primary liaison with external auditors. Additionally, the role involves managing vendor security reviews, maintaining cybersecurity policies and standards, and partnering with various teams to ensure compliance and security across the organization.
The ideal candidate will have over 10 years of GRC experience, including at least 5 years in leadership roles. Strong technical expertise is required, particularly in reviewing contracts, managing vendor risks, and understanding frameworks like NIST 800-53. Proficiency in AWS, container architectures, and tools such as Terraform or CloudFormation is essential. Excellent communication skills and the ability to build consensus across teams are also critical.
Smartsheet offers a competitive base salary range of $235,000 to $315,000 USD, along with employer-subsidized medical, vision, and dental coverage for full-time employees. Additional benefits include a 401(k) match, monthly productivity stipend, flexible time-off programs, and opportunities for professional growth and development.
At Smartsheet, employees are encouraged to explore, push boundaries, and grow beyond their roles. The company values diverse perspectives and fosters an inclusive environment where contributions have a real impact. Joining Smartsheet means being part of a team that is dedicated to building tools that empower teams to work smarter and achieve more.