or apply directly on Mattermost's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 80 days Mattermost's roles stay open a median of 81 days
- Reposted
- No
- Salary listed
- Yes 60% of Mattermost's roles list one
- Ghost-job risk at Mattermost
- high 15 stale, 0 reposted of 15 open
- Hiring momentum
- 18 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-10-23
Measured from postings appearing on and disappearing from Mattermost's own greenhouse board since 2026-08-03. Full hiring picture for Mattermost.
About this role
As a GRC Manager at Mattermost, you will be responsible for owning and modernizing the governance, risk, and compliance program across federal and commercial markets. Your role involves hands-on compliance work, coordinating with internal teams and external auditors, and applying GRC engineering and AI to streamline processes. You will also lead the GRC team as the program scales, ensuring compliance readiness and managing risk effectively.
- benefits
- 4/5
- freshness
- 1/5
- career value
- 4/5
- role clarity
- 4/5
- pay transparency
- 5/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Mattermost as an employer.
What you need
- Bachelor's degree in computer science, information security, or related field or significant professional GRC and compliance experience
- Proven senior-level experience in governance, risk, and compliance, security compliance, or IT audit, including direct ownership of a certification or authorization program
- Experience with U.S. Federal standards including CMMC and NIST series (800-171 / 800-53)
- Experience with ISO 27001 and SOC 2 Type II
- Experience operating a formal risk management program
- Experience running a third-party and vendor risk management program
Nice to have
- Professional GRC certifications such as CISA, CRISC, CISM, CISSP, or CIPP
- Experience working with AI platforms such as Claude, OpenAI, or Gemini
- Experience with compliance automation tooling such as Vanta or Drata, and continuous controls monitoring
- Direct experience applying AI or LLM-based workflows to GRC tasks
- Proficiency in no-code automation or scripting languages
What you get
- Remote-first work environment
- Medical, dental, and vision coverage
- Unlimited PTO plus company holidays
- Work from home stipend
- Annual learning and development budget for conferences, certifications, and courses
- Paid parental leave for all parents
Worth weighing
- No specific mention of the technology stack used in GRC engineering and automation
- The role requires U.S. citizenship and eligibility for government security clearance, which may limit candidate pool
- The target salary range is provided, but pay may vary based on location and other factors
- The position may involve high-stakes compliance work, which could be stressful depending on the organization's needs
Summarised from Mattermost's posting. Read the full original.
Listed by Mattermost on their greenhouse job board, last confirmed open on 2026-10-23. PitchMeAI is not the employer.
More roles at Mattermost
- Senior Full Stack EngineerUnited States
- Senior Account Executive (Enterprise)United States
- Staff Full Stack EngineerUnited States
- Staff Full Stack EngineerToronto, Ontario, Canada