Lead and modernize Mattermost's GRC program end-to-end, including federal readiness (CMMC, NIST), ISO 27001 and SOC 2 Type II certification cycles, third-party/vendor risk, audit coordination, and customer security assurance. Apply GRC engineering, automation, and AI to replace manual evidence collection with continuous monitoring, and grow and lead the GRC team as the program scales.