GRC Compliance Specialist

📋 Description

• Framework Management: SOC 2 II and ISO 27001; roadmap for HIPAA/GDPR.
• GRC Automation: Administer GRC tools (Vanta/Drata) for automated evidence.
• Audit Coordination: Lead external audits and interface with auditors.
• Customer Trust: Own security questionnaires; build a Trust Center.
• Risk Management: Run internal risk reviews and vendor security assessments.

🎯 Requirements

• 1–3 years in GRC, IT Audit, or Security Compliance.
• SOC 2 or ISO 27001 end-to-end audit experience.
• Explain security controls (encryption, IAM, CI/CD, cloud logs) to non-technical teams.
• GRC automation experience (Vanta, Drata, Secureframe).
• Excellent written and verbal English.
• CISA, CRISC, or similar certifications.

🎁 Benefits

• Opportunity to work at a high-growth AI startup backed by top investors.
• Ownership and autonomy to ship fast.
• Collaborative, world-class engineering team.
• Strong growth culture with exposure to cutting-edge security practices.
• Remote-friendly, flexible work environment.