Governance, Risk & Compliance (GRC) Manager

Sigma is seeking an experienced GRC Manager to lead and scale our governance, risk, and compliance programs. This role is based in our San Francisco office or upcoming New York office and reports to the General Counsel. You'll have the opportunity to build a strategic, enterprise-wide GRC function that enables business growth while managing organizational risk.

As our GRC Manager, you'll partner with Legal, Engineering, Product, Sales, Operations, and leadership to develop a comprehensive GRC framework that protects Sigma's interests, supports our strategic objectives, and builds stakeholder trust. You'll mature our governance structures, implement scalable risk management processes, and ensure compliance with applicable regulatory requirements—all while enabling the business to move quickly and confidently.

What You'll Do

Governance

• Design and implement governance frameworks, including reporting, policy governance, and control oversight
• Establish and maintain enterprise policies, standards, and procedures across technology, security, privacy, and operational functions
• Build and lead a governance committee structure that provides appropriate oversight and decision-making
• Create governance dashboards and metrics to provide visibility into program maturity and effectiveness
• Partner with leadership to align governance activities with business strategy and risk appetite

Risk Management

• Develop and operate a comprehensive Enterprise Risk Management (ERM) program
• Conduct regular enterprise-wide risk assessments and maintain a dynamic risk register
• Build and maintain business continuity and disaster recovery programs, including regular testing and tabletop exercises
• Implement third-party risk management processes, including vendor risk assessments, contract reviews, and ongoing monitoring
• Create risk treatment plans and track remediation activities across the organization
• Facilitate risk-informed decision-making at all levels of the organization
• Coordinate with functional leaders to ensure risks across all business areas are identified and managed appropriately

Compliance

• Own audit and certification programs including SOC 2, ISO 27001, HIPAA, and other relevant standards
• Develop and maintain compliance monitoring programs to track regulatory changes and work with the legal team to assess impact
• Partner with HR and Legal to support labor & employment compliance programs, including workplace safety, anti-discrimination, wage and hour requirements, and multi-jurisdictional employment regulations
• Monitor and ensure adherence to industry-specific regulatory requirements relevant to Sigma's business operations
• Manage security awareness training programs enterprise-wide
• Conduct internal audits and assessments to validate control effectiveness
• Coordinate external audits and assessments with third-party auditors

Business Enablement

• Support sales and customer success teams with compliance documentation and security inquiries
• Develop customer-facing materials that articulate Sigma's risk management and compliance posture
• Complete and manage responses to customer security questionnaires and assessments (VSAs, SIGs, custom questionnaires)
• Enable efficient deal cycles by maintaining ready-to-use compliance artifacts, trust center content, and documentation
• Partner with Sales Engineering and Solutions teams to address prospect security and compliance requirements

What You Bring

Required

• 4+ years of experience in governance, risk management, and/or compliance roles, preferably in SaaS or technology companies
• Demonstrated experience building or significantly maturing a GRC program from the ground up
• Track record of successfully leading certification audits (SOC 2, ISO 27001, HIPAA, or similar)
• Experience implementing risk management frameworks (COSO, ISO 31000, NIST RMF, or similar)
• Strong knowledge of data privacy regulations and their practical application (GDPR, CCPA, etc.)
• Experience developing and maintaining information security and privacy policies, procedures, and control frameworks
• Strong business acumen with ability to translate risk and compliance requirements into business value
• Excellent communication skills with ability to influence stakeholders at all levels, including leadership
• Proven ability to manage multiple priorities and stakeholders in a fast-paced, high-growth environment
• Collaborative mindset and commitment to enabling business success while managing risk

Preferred

• Experience with GRC platforms (ServiceNow GRC, Archer, LogicGate, or similar)
• Hands-on experience with cloud environments (GCP, AWS, Azure) from a compliance and security perspective
• Experience with labor & employment compliance or cross-functional collaboration with HR on regulatory matters
• Familiarity with multi-state or international employment regulations
• Experience with continuous compliance automation tools (Vanta, Drata, Secureframe, Tugboat, or similar)
• Professional certifications such as CRISC, CISA, CISM, CGEIT, CISSP, or CIPP
• Experience in high-growth SaaS or technology companies
• Background in both technical and operational risk management
• Experience working in organizations with distributed or remote teams
• Familiarity with security frameworks such as NIST CSF, CIS Controls, or OWASP

Why Join Sigma

This is an opportunity to build a world-class GRC program that doesn't just check boxes but genuinely enables the business to pursue opportunities with confidence. You'll work across the entire organization, have direct access to the General Counsel, and make a tangible impact on how Sigma manages risk and creates value for customers.

Additional Job details

The base salary range for this position is $190k - $215k annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package.

Governance, Risk & Compliance (GRC) Manager

Sigma is seeking an experienced GRC Manager to lead and scale our governance, risk, and compliance programs. This role is based in our San Francisco office or upcoming New York office and reports to the General Counsel. You'll have the opportunity to build a strategic, enterprise-wide GRC function that enables business growth while managing organizational risk.

As our GRC Manager, you'll partner with Legal, Engineering, Product, Sales, Operations, and leadership to develop a comprehensive GRC framework that protects Sigma's interests, supports our strategic objectives, and builds stakeholder trust. You'll mature our governance structures, implement scalable risk management processes, and ensure compliance with applicable regulatory requirements—all while enabling the business to move quickly and confidently.

What You'll Do

Governance

• Design and implement governance frameworks, including reporting, policy governance, and control oversight
• Establish and maintain enterprise policies, standards, and procedures across technology, security, privacy, and operational functions
• Build and lead a governance committee structure that provides appropriate oversight and decision-making
• Create governance dashboards and metrics to provide visibility into program maturity and effectiveness
• Partner with leadership to align governance activities with business strategy and risk appetite

Risk Management

• Develop and operate a comprehensive Enterprise Risk Management (ERM) program
• Conduct regular enterprise-wide risk assessments and maintain a dynamic risk register
• Build and maintain business continuity and disaster recovery programs, including regular testing and tabletop exercises
• Implement third-party risk management processes, including vendor risk assessments, contract reviews, and ongoing monitoring
• Create risk treatment plans and track remediation activities across the organization
• Facilitate risk-informed decision-making at all levels of the organization
• Coordinate with functional leaders to ensure risks across all business areas are identified and managed appropriately

Compliance

• Own audit and certification programs including SOC 2, ISO 27001, HIPAA, and other relevant standards
• Develop and maintain compliance monitoring programs to track regulatory changes and work with the legal team to assess impact
• Partner with HR and Legal to support labor & employment compliance programs, including workplace safety, anti-discrimination, wage and hour requirements, and multi-jurisdictional employment regulations
• Monitor and ensure adherence to industry-specific regulatory requirements relevant to Sigma's business operations
• Manage security awareness training programs enterprise-wide
• Conduct internal audits and assessments to validate control effectiveness
• Coordinate external audits and assessments with third-party auditors

Business Enablement

• Support sales and customer success teams with compliance documentation and security inquiries
• Develop customer-facing materials that articulate Sigma's risk management and compliance posture
• Complete and manage responses to customer security questionnaires and assessments (VSAs, SIGs, custom questionnaires)
• Enable efficient deal cycles by maintaining ready-to-use compliance artifacts, trust center content, and documentation
• Partner with Sales Engineering and Solutions teams to address prospect security and compliance requirements

What You Bring

Required

• 4+ years of experience in governance, risk management, and/or compliance roles, preferably in SaaS or technology companies
• Demonstrated experience building or significantly maturing a GRC program from the ground up
• Track record of successfully leading certification audits (SOC 2, ISO 27001, HIPAA, or similar)
• Experience implementing risk management frameworks (COSO, ISO 31000, NIST RMF, or similar)
• Strong knowledge of data privacy regulations and their practical application (GDPR, CCPA, etc.)
• Experience developing and maintaining information security and privacy policies, procedures, and control frameworks
• Strong business acumen with ability to translate risk and compliance requirements into business value
• Excellent communication skills with ability to influence stakeholders at all levels, including leadership
• Proven ability to manage multiple priorities and stakeholders in a fast-paced, high-growth environment
• Collaborative mindset and commitment to enabling business success while managing risk

Preferred

• Experience with GRC platforms (ServiceNow GRC, Archer, LogicGate, or similar)
• Hands-on experience with cloud environments (GCP, AWS, Azure) from a compliance and security perspective
• Experience with labor & employment compliance or cross-functional collaboration with HR on regulatory matters
• Familiarity with multi-state or international employment regulations
• Experience with continuous compliance automation tools (Vanta, Drata, Secureframe, Tugboat, or similar)
• Professional certifications such as CRISC, CISA, CISM, CGEIT, CISSP, or CIPP
• Experience in high-growth SaaS or technology companies
• Background in both technical and operational risk management
• Experience working in organizations with distributed or remote teams
• Familiarity with security frameworks such as NIST CSF, CIS Controls, or OWASP

Why Join Sigma

This is an opportunity to build a world-class GRC program that doesn't just check boxes but genuinely enables the business to pursue opportunities with confidence. You'll work across the entire organization, have direct access to the General Counsel, and make a tangible impact on how Sigma manages risk and creates value for customers.

Additional Job details

The base salary range for this position is $190k - $215k annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package.

Sigma is hiring Corporate Counsel, Commercial who will report to Sigma’s General Counsel. The ideal candidate will have excellent judgment, the ability to appropriately weigh risk, and an eye for detail. More specifically, Corporate Counsel will be responsible for:

• supporting Sigma’s sales and procurements teams by drafting and negotiating technology transactions including (i) sales and related agreements (master subscription agreements, data processing agreements, order forms, and non-disclosure agreements); (ii) alliance agreements with third-party partners, (iii) cloud infrastructure agreements (e.g., agreements with AWS, Azure, GCP, etc.); and (iv) consulting and independent service agreements.
• conducting legal and regulatory due diligence in international jurisdictions where Sigma plans to enter into technology agreements.
• collaborating with cross-functional teams to ensure agreements are consistent with internal corporate policies and processes and to obtain any required approvals from internal stakeholders and optimize support to the business.
• provide legal and commercial support in relation to existing contracts and provide support in the event of any disputes or potential disputes.
• providing sound, practical advice and guidance on legal and business-related issues to the internal clients.

Please note: This role is an in-person role and is based in San Francisco, CA.

REQUIREMENTS:

•   JD from an accredited law school, membership in at least one state bar, and ability to practice in California;
•   At least 7 years of relevant experience preferred;
•   Enjoys understanding new technologies with ability to quickly learn them;
•   Self-motivated team player;
•   Excellent organizational and project management skills;
•   Experience working with a CLM tool preferred;
•   Experience working at a fast paced Technology company is the Saas or Enterprise software business.

—-------------------------------------------------------------------------------------------------------

Additional Job details

The base salary range for this position is $200k - $235k annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package.

Every Sigma employee is expected to follow the company's confidentiality and security standards for handling sensitive data; Sigma employees must abide by the company's data security policies.

About Us:
Sigma is a fast-growing startup headquartered in San Francisco and dedicated to revolutionizing data analytics. Our dynamic team thrives on innovation, collaboration, and achieving excellence in everything we do. As we continue to scale, we are seeking an experienced Contracts Manager to support our legal operations and contribute to our company's growth.

Key Responsibilities: The contracts & legal operations manager will manage and oversee the full contract lifecycle for commercial agreements while ensuring regulatory compliance and risk mitigation. This role will also maintain our contract database and implement process improvements for contract management workflows.

• Contract Management:
• Maintain and organize the company’s contract database and ensure compliance with contract management policies;
• Track contract deadlines, renewals, and obligations in contract management system; and
• Provide guidance to business teams on contract terms and company policies.
• Legal Support and Legal Operations:
• Maintain contract templates and playbooks while identifying opportunities for standardization; 
• Support General Counsel with a variety of initiatives including tooling selection and RFP, outside counsel selection, patent program management;
• Maintain legal & compliance team intranet presence;
• Create and maintain operational guides and other content;
• Support legal department with contract-related projects and process improvements; 
• Assist with budget tracking and management; and
• Implement processes that allow Sigma to track KPI’s and other important metrics for the legal team.
• Team Collaboration:
• Work closely with internal stakeholders, including finance and operations, to ensure seamless legal support for various departments; and
• Liaise with external counsel as required.

Qualifications:

• Bachelor’s degree or equivalent education. 
• 5+ years of experience in contract management and legal operations, preferably in a startup or fast-paced environment;
• Experience with managing legal operations for in-house legal teams;
• Proficiency in contract management software (Summize preferred but not required) and MS Office Suite; 
• Exceptional organizational skills with a keen eye for detail;
• Ability to prioritize and handle multiple tasks under tight deadlines;
• Excellent verbal and written communication skills; and
• Collaborative mindset and ability to work independently.

Additional Job details

The base salary range for this position is $180k - $205k annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package.