> Markdown version of [/jobs/ext/1367662-grc-program-manager](https://www.wearedevelopers.com/jobs/ext/1367662-grc-program-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Program Manager - **Company:** Palantir Technologies - **Location:** New York, NY, United States (Remote available) - **Salary:** $90,000.0 - $160,000.0 - **Contract:** Permanent contract - **Skills:** Software Engineering, Enterprise Software Applications - **Published:** July 21, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/87786147/1 ## About the Role * Demonstrated success managing compliance programs for an enterprise software company, startup or other company. * Experience with multiple GRC frameworks and standards, such as SOC 2, ISO 27001, IRAP or ENS. Experience in USG-specific frameworks is particularly valuable: FedRAMP, NIST 800-53, DoD CC SRG, FISMA, or CMMC. * Excellent judgment and composure in high-pressure situations, including during active audits or compliance incidents. * A creative approach to project management centered around lightweight frameworks that enable rapid iteration, while operating in harmony with a larger development and compliance organization. * An ability to develop strong relationships with key internal stakeholders (including customer-facing teams), auditors, and regulators, with a high level of empathy for our end-users' needs. * Meticulous attention to detail, including holding tightly to your team's compliance and product quality bar. * A proven track record of building and scaling compliance processes from the ground up, particularly in USG-regulated environments. * Experience with risk management methodologies, including maintaining risk registers, conducting risk assessments, and managing third-party or vendor risk programs. What We Require * This role requires that you work from the country listed on this job posting and that you are based within a commutable distance of your local Palantir office. * Willingness and eligibility to obtain a U.S. security clearance preferred. ## Description As a GRC Program Manager, you are the engine behind Palantir's Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve. Core Responsibilities * Design, document, and continuously improve compliance processes and frameworks to scale GRC operations across Commercial, IG, and USG environments. * Serve as connective tissue across teams, translating regulatory requirements into actionable workflows and ensuring accountability at every stage of the compliance lifecycle. * Coordinate across internal and external audit cycles (FedRAMP, SOC 2, ISO 27001, etc.), ensuring evidence collection, remediation tracking, and stakeholder communication stay on schedule. * Keep broad and complete state of everything involving or related to your projects, including audit timelines, control implementation status, and continuous monitoring obligations. Pre-empt and resolve any issues that may steer projects off-course. * Enhance cross-team collaboration across engineering, legal, and customer-facing teams to drive key GRC deliverables through the entire software development and compliance lifecycle. * Synthesize concrete compliance goals from product and regulatory vision, mapping global strategy to granular team tasks and issues. This means triaging requests from the field to create maximum focus for the team, while escalating items that need immediate attention. * Work with customer-facing engineering teams on adoption, roll out, and support of compliance-related product features and certifications. ## Related Videos - [How to Stop Your Agents From Going Rogue - Arnav Gupta](https://www.wearedevelopers.com/videos/2152-how-to-stop-your-agents-from-going-rogue-arnav-gupta) - [Creating Europe's AI Moment – Now or Never](https://www.wearedevelopers.com/videos/100059-creating-europe-s-ai-moment-now-or-never) - [The Avengers Initiative (Practical Ethics for Software Engineers)](https://www.wearedevelopers.com/videos/2070-the-avengers-initiative-practical-ethics-for-software-engineers) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [AI Driven Development](https://www.wearedevelopers.com/videos/100340-ai-driven-development) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [The Prompt Engineer ✍️](https://www.wearedevelopers.com/magazine/216-the-prompt-engineer)