Fireworks AI
GRC Specialist
$200K–$220K
San Mateo +2 · On-site · Full-time · Posted Sep 23, 2026
- Location
- San Mateo
New York
United States, Remote - Experience
- 5-7 years in GRC, IT audit, information security, or a closely related field.
About the job
Own and operate Fireworks AI’s GRC program, including risk management, access reviews, vendor assessments, audits, control monitoring, and policy maintenance.
What you'll do
- Run day-to-day GRC operations, risk assessments, user access reviews, security awareness, and third-party risk management.
- Conduct internal audits and support external audits; maintain control monitoring, evidence automation, and audit readiness.
- Partner with control owners and cross-functional teams to improve controls, maintain policies, and report risk and program metrics.
What they ask for
- 5-7 years of experience in GRC, IT audit, information security, or a closely related field.
- Working knowledge of major security and privacy frameworks such as SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR, or CCPA.
- Experience running user access reviews and administering a security awareness or phishing simulation platform.
- Experience with GRC platforms and comfort with cloud environments (AWS, GCP, or Azure).
Pay
$200K – $220K (base salary); equity offered, amount not stated
Tools
SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001, GDPR, Adaptive Security, AWS
AI focus
The role supports GRC for an AI platform, including security and compliance frameworks and controls; no direct AI development work is specified.
Model-written summary · the original posting is authoritative