About the job
Superhuman provides an innovative hybrid working model for this role, offering employees a balance of focused work and collaborative in-person interactions that promote trust, creativity, and a robust team culture.
About Superhuman
Superhuman is an AI productivity platform dedicated to unlocking everyone's superhuman potential. With a suite of applications and agents, Superhuman integrates AI into the workflow of over 1 million applications and websites. Our offerings include Grammarly's writing assistance, Coda's collaborative workspaces, Mail's inbox management, and Go, the proactive AI assistant that provides contextual help. Established in 2009, Superhuman empowers more than 40 million people and 50,000 organizations globally, enabling them to reduce busywork and concentrate on what truly matters. Discover more at superhuman.com and learn about our values here.
The Opportunity
Superhuman is consolidating its compliance practices across its product family into a unified program. As a Compliance Program Manager, you will oversee audit execution, control testing, and vendor risk management within a multi-product environment. This role is ideal for a mid-level GRC professional looking to advance from single-entity compliance to audit integration, cross-framework collaboration, and strategic initiatives.
This high-impact role allows you to shape Superhuman's multi-product compliance program. You will help unify the organization's compliance approach into a cohesive strategy while working across diverse frameworks, including AI management. You will be part of a small, responsible team that leverages LLMs and AI agents to enhance GRC workflows. Your contributions will be highly visible to Legal and Engineering leadership, granting you direct influence over the development of a modern, AI-driven compliance program as we expand our product offerings.
In this role, you will:
- Lead audit evidence collection, validation, and documentation throughout audit cycles, managing scheduling, coordination, and stakeholder engagement.
- Facilitate multi-entity audit programs across products at varying maturity levels, including consolidation and gap analysis.
- Design and implement control testing procedures across SOC 2, ISO 27001, ISO 27017/27018, ISO 27701, PCI DSS, and ISO 42001.
- Identify control deficiencies, document findings, and drive remediation efforts with control owners.