EliseAI
Director of Governance, Risk, and Compliance
New York City +2 · On-site · Director · Full-time · Posted Jun 16, 2026
- Location
- New York City
San Francisco
Toronto - Experience
- 8+ years in Governance, Risk, and Compliance, Information Security, or a related field; at least 3 years in a leadership or program ownership role.
About the job
Leads EliseAI’s governance, risk, and compliance program, including audits, vendor risk, compliance policies, and GRC team development.
What you'll do
- Set direction for GRC across compliance frameworks and oversee audit planning, evidence, documentation, and auditor communications.
- Lead vendor risk management and review security questionnaires, including final sign-off.
- Build and manage the GRC team and compliance policy framework; coordinate with Legal, Security Engineering, and business stakeholders.
What they ask for
- 8+ years in Governance, Risk, and Compliance, Information Security, or a related field, including at least 3 years in a leadership or program ownership role.
- Expertise in SOC1, SOC 2, PCI, HIPAA, and ISO certifications.
- Track record managing end-to-end audit programs and external auditor relationships.
- Experience building or scaling a GRC function, including team hiring and development.
Pay
$200,000 - $275,000 USD/CAD (base salary)
Tools
SOC 1, SOC 2, PCI, HITRUST, HIPAA, ISO
Model-written summary · the original posting is authoritative