GRC and Security Compliance Lead

What you'll do

• Lead audit evidence and auditor coordination for SOC 2, ISO 27001, and PCI DSS; maintain cross-framework control mappings and colocation vendor compliance.
• Own security questionnaires, policies, public posture documents, documentation systems, and deployment data-flow records.
• Coordinate compliance training, evidence automation with Security Engineering, and privacy-program support with relevant teams.

What they ask for

• Certification such as CISA, ISO 27001 Lead Implementer/Auditor, CIPM, CIPT, or CIPP/E.
• Substantial GRC, security compliance, or technical compliance documentation experience, including carrying at least one audit cycle end to end.
• Hands-on evidence production and defense in at least one SOC 2, ISO 27001, or PCI DSS audit; experience mapping controls across multiple frameworks.
• Exceptional technical writing and fluency; working knowledge of GDPR, CCPA/CPRA, and emerging AI regulation.

Nice to have

• Audit experience in on-premise, colocation, or hybrid environments; compliance automation or trust center tooling experience.
• Familiarity with AI governance frameworks, ML/AI data pipelines, SQL or scripting, HIPAA, or FedRAMP.

Pay

$165K – $223.3K USD base salary; offers equity and bonus (amounts not stated).

Tools

Docker, Ansible, GitHub Actions, AWS, Vanta, Drata, SQL

AI focus

Use and experiment with advanced AI tools in daily work. The role also owns AI Safety statements and Model Cards, and may support AI governance and model documentation.