Senior GRC Specialist
Core
Own day-to-day GRC operations, run risk management programs, manage third-party risk, and support internal/external audits for a production AI platform.
Role type
Senior GRC Specialist (Security & Compliance)
Builds
Compliance programs (SOC 2, HIPAA, ISO 27001/27701/42001, GDPR), risk registers, audit evidence, and control automation.
Domain
AI Infrastructure / Cloud Security / Regulatory Compliance
Deliverable
dashboards & analysis | client delivery (audits)
Required skills
GRC frameworks (SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR), GRC platforms (Vanta, Drata, OneTrust, ServiceNow), Identity & Access Management (RBAC, JML), Security Awareness/Phishing simulation, Cloud environments (AWS, GCP, Azure), Risk assessment, Internal auditing
Preferred skills
Program leadership, Control automation, Cross-functional influence
Technologies
Vanta, Drata, OneTrust, ServiceNow, Adaptive Security, KnowBe4, Hoxhunt, Proofpoint, AWS, GCP, Azure
Responsibilities
Own user access reviews and certifications; Run annual risk assessments and maintain risk registers; Manage third-party/vendor risk assessments; Design and execute internal audits; Administer GRC platforms and automate control monitoring; Update security policies and procedures; Translate program data into actionable insights for leadership.
Seniority
Senior, hands-on IC with growth into program leadership