GRC Subject Matter Expert

Location: Remote U.S.; travel roughly once per quarter for customer onsites, POC workshops, team offsites, and events.

Salary: $171,000–$201,000 base pay per year, plus equity and benefits.

Company

hirify.global provides a Trust Management Platform that helps businesses continuously monitor, improve, and prove their security and compliance.

What you will do

• Serve as the dedicated GRC subject matter expert for Strategic and Enterprise account executives from discovery through POCs, workshops, customer onsites, close, and expansion.
• Scope and advise on compliance, third-party risk management, risk management, trust, and questionnaire automation programs.
• Guide prospects on multi-framework strategy, shared controls, workspace scoping, custom frameworks, and audit sequencing.
• Review AI-agent-generated answers for accuracy, answer field questions, and build or improve AI-enabled GRC tooling.
• Design and deliver enablement sessions, bootcamps, mock-customer roleplays, curriculum modules, and GRC content reviews.
• Align with sales managers, provide structured product feedback, and support post-sales handoffs.

Requirements

• 5+ years of hands-on GRC experience, including building, running, transforming, or advising on multi-framework compliance programs.
• Experience with frameworks and regulations such as SOC 2, ISO 27001/27017/27018/27701, HIPAA/HITRUST, PCI DSS 4.0, GDPR, U.S. privacy regulations, or NIST CSF 2.0.
• Working fluency in at least one emerging area: AI governance, GRC engineering and continuous monitoring, or enterprise risk.
• Customer-facing experience with CISOs, founders, procurement teams, and enterprise buyers, plus strong sales-process knowledge such as MEDDPICC.
• Production-quality writing, audit-process expertise, teaching or enablement experience, and the ability to evaluate LLM output against authoritative sources.
• Must be based in the United States; the role includes periodic customer and company travel.

Nice to have

• Certifications such as CISSP, CISA, CISM, ISO 27001 LA/LI, CIPP/CIPT, or AI-governance credentials.
• Deep expertise in two or three GRC pillars with working knowledge across governance, data governance, compliance, risk, third-party risk, continuous monitoring, privacy, trust, and AI security and governance.

Culture & Benefits

• Remote work with workspace, internet, and cellphone stipends.
• Medical, dental, and vision coverage, with employee-only medical premiums covered for most plans.
• 16 weeks of paid parental leave, family planning benefits, and a health and wellness stipend.
• Matching 401(k) contribution with immediate vesting, flexible PTO, 80 hours of sick time, and 11 company-paid holidays.
• Virtual team-building activities, lunch-and-learns, and company-wide events.