Thinking Machines Lab
Governance, Risk and Compliance Lead
$225K–$350K
San Francisco · On-site · Full-time · Posted Aug 4, 2026
- Experience
- 7+ years related experience.
- Visa sponsorship
- Visa sponsorship is offered; success is not guaranteed for every candidate or role.
About the job
Leads Thinking Machines Lab’s GRC function, personally managing certifications and audits while building compliance processes and the function’s roadmap.
What you'll do
- Own certification work from scoping and control design through evidence collection, auditor engagement, and audit close.
- Run recurring compliance processes, including control testing, audit preparation, risk-register maintenance, and policy attestations.
- Translate regulatory and framework requirements into actionable controls and advise technical teams on compliance and risk.
What they ask for
- 7+ years of related experience across technology and cybersecurity GRC, with breadth across governance, risk, and compliance.
- Experience leading a SOC 2, ISO 27001, FedRAMP, or comparable certification from scoping through audit close.
- Hands-on experience collecting audit evidence and writing control documentation.
- Experience managing a recurring compliance process and translating technical domains for non-technical stakeholders.
Nice to have
- Software engineering or technical engineering background applied to GRC, with personally built scripts, tools, or automations.
- Experience automating compliance requirements using AI agents and custom-built tooling, or growing a GRC function as a company scaled.
Pay
$225,000 - $350,000 (annual base salary)
Tools
SOC 2, ISO 27001, FedRAMP, GDPR, EU AI Act
AI focus
Preferred experience includes translating compliance requirements into scalable automation using AI agents and custom-built tooling.
Model-written summary · the original posting is authoritative