Senior GRC Specialist

📋 Description

• Own day-to-day GRC operations (access reviews, awareness, JML)
• Run the risk management program with risk assessments and risk register
• Manage third-party risk via vendor/subprocessor assessments
• Design and execute internal audits and coordinate evidence
• Own continuous control monitoring and evidence automation
• Build cross-functional relationships across engineering, IT, ops, legal, and sales

🎯 Requirements

• 5-7 years of experience in GRC, IT audit, information security, or related field
• Knowledge of SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR, or CCPA
• Experience with GRC platforms (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC)
• Experience running user access reviews and IAM concepts (RBAC, least privilege)
• Hands-on with security awareness or phishing-simulation platforms
• Cloud experience with AWS, GCP, or Azure and SaaS operation basics

🎁 Benefits

• Solve hard problems at AI infra frontier
• Work with bleeding-edge tech impacting AI globally
• Ownership and impact in a fast-growing team
• Learn from world-class engineers and researchers