Risk and Compliance Lead
Core
Lead security compliance initiatives and mature the security GRC program across the organization to identify and mitigate risk.
Role type
Senior IC Risk and Compliance Lead
Builds
Enterprise risk management program, compliance frameworks (SOC2, ISO 27001, TISAX), and third-party risk management infrastructure
Domain
Cybersecurity, GRC, Automotive/Defense/Industrial
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security GRC program ownership, Enterprise Risk Assessment, NIST 800-53/CCF assessments, SOC2/ISO 27001/TISAX audit management, Third Party Risk Management, GRC tooling (Vanta/Drata/OneTrust), Cross-functional remediation leadership
Preferred skills
Automotive security frameworks (ISO 21434, ISO 26262), CISSP certification
Technologies
Vanta, Drata, OneTrust, NIST 800-53, CCF, ISO 27001, TISAX, SOC2
Responsibilities
Own and mature the security GRC program including policy lifecycle and risk register maintenance; Conduct enterprise and product-level risk assessments; Lead compliance efforts for SOC2, ISO 27001, ISO 9001, TISAX, and federal/defense requirements; Drive Third Party Risk Management (TPRM) program; Build and maintain GRC program infrastructure and executive reporting; Partner with Legal, Engineering, and Operations to embed compliance into business processes; Develop security policies and standards; Support customer-facing security assurance activities
Seniority
Senior, hands-on IC
