GRC Manager
Core
Build, support, and enhance security governance, compliance, and privacy programs for an AI inference platform serving dynamic AI companies.
Role type
GRC Manager (Security Compliance)
Builds
Security governance frameworks, compliance controls, and risk management programs for an AI infrastructure platform.
Domain
AI/ML Infrastructure, Cloud Security, Regulatory Compliance
Deliverable
production ML models
Required skills
GRC program management, security framework implementation (SOC 2, ISO 27001, NIST, GDPR), risk assessment, audit coordination, third-party risk management, customer security assurance, cross-functional collaboration, product compliance translation
Preferred skills
Cloud security compliance (AWS/GCP), GRC tool proficiency (Vanta, Drata), AI/ML security and data privacy knowledge, early-stage startup experience
Technologies
SOC 2, ISO 27001, NIST, GDPR, AWS, GCP, Vanta, Drata, Secureframe
Responsibilities
Translate regulatory and customer requirements into product controls; design and maintain security governance frameworks; manage company-wide risk assessment programs; support compliance with SOC 2, ISO 27001, HIPAA, FedRAMP; coordinate external audits and certifications; oversee vendor security assessments; support customer security questionnaires and due diligence; develop security training programs.
Seniority
Mid-Senior, hands-on IC
