GRC Lead

📋 Description

• Own customer security reviews, including security questionnaires, due diligence requests, and
• Analyze unfamiliar or complex security questions and collaborate with the appropriate technical
• Help teams evaluate customer security requirements, vendor risks, compliance gaps, and other
• Maintain accurate and approved security responses and supporting evidence, using AI and automation
• Own SOC 2 and ISO 27001 compliance programs, including audit preparation, control management
• Establish priorities for external compliance and audit partners, evaluate the quality of their

🎯 Requirements

• Proven experience personally owning a compliance program or leading a significant audit cycle
• Strong understanding of governance, risk, and compliance principles, with practical experience
• Demonstrated ability to make sound risk-based decisions, articulate tradeoffs, and determine when
• Strong technical curiosity and the ability to engage credibly with engineers on topics such as data
• Experience with SOC 2 and ISO 27001 programs, including control management, evidence collection
• Strong AI fluency and attention to detail, with the ability to build or leverage AI-assisted

🎁 Benefits

• Competitive annual salary of $160,000–$230,000 USD, location-independent in accordance with the
• Meaningful equity compensation.
• Fully remote opportunity across North America.
• High degree of autonomy and ownership in building a GRC function from the ground up.
• Opportunity to directly shape customer security assurance, compliance strategy, risk management
• Exposure to AI-powered workflows and automation designed to increase the impact and efficiency of a