Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$185к$215кмедиана$263к
50 в выборке
83
Хорошая вакансия
развернуть
Это четко описанная senior-роль в AI-стартапе с актуальными задачами в комплаенсе и governance, но без диапазона зарплаты и с работой сразу по нескольким направлениям сложнее оценить оплату и нагрузку.
Кликните для подробной информации
Зарплата не указанаШирокий охватАктуальная сфераЩедрый пакет
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Compliance Generalist (AI): Building cross-functional compliance programs, policies, SOPs, training, and monitoring across AI governance, data governance, privacy, trade compliance, and corporate compliance with an accent on security frameworks and third-party risk management. Focus on maintaining SOC 2, ISO 27001, and NIST evidence, coordinating audits, managing vendor risk, translating regulatory developments into workstreams, and closing process gaps.
Location: On-site in New York, NY or San Francisco, CA, United States
Company
hirify.global is a research lab building open AI models that make intelligence accessible, customizable, and available for further development.
What you will do
Build and maintain compliance processes, policies, SOPs, training materials, trackers, templates, and intake forms across multiple compliance pillars.
Support security framework compliance for SOC 2, ISO 27001, NIST 800-53/800-171, and CMMC by maintaining evidence, coordinating control owners, and preparing for audits.
Own or support third-party risk management operations, including vendor questionnaires, risk tiering, onboarding reviews, and remediation tracking.
Respond to customer and partner security and compliance questionnaires with relevant subject-matter owners.
Track AI, data, and privacy regulatory developments and translate them into internal workstreams.
Prepare leadership updates and partner with Legal, Security, Privacy, People, Engineering, and compliance pillar leads.
Requirements
4–7 years of experience in compliance, risk, legal operations, or a related GRC function, preferably in technology or a regulated industry.
Direct experience with at least one security framework, such as SOC 2, ISO 27001, or NIST, and with third-party risk or vendor risk processes.
Ability to own ambiguous problems end to end with minimal supervision and manage multiple active workstreams.
Strong written communication skills, including the ability to turn ambiguous requirements into clear policies and SOPs.
Experience working cross-functionally with Legal, Security, Privacy, People, and Engineering stakeholders.
On-site work is required in New York, NY or San Francisco, CA.
Nice to have
Exposure to AI governance, GDPR/CCPA privacy, ITAR/EAR export controls, or federal contracting compliance such as CMMC and FAR/DFARS.
Experience with GRC or compliance platforms such as Vanta.
Experience responding to customer security questionnaires or supporting enterprise sales and procurement cycles.
Experience in a high-growth or startup environment where the compliance function is still being built.
Culture & Benefits
Top-tier compensation with salary, equity, and stock options.
Comprehensive medical, dental, vision, and life insurance with an annual wellness allowance.
Daily lunch and dinner provided in the office.
22 weeks of paid parental leave for birthing, non-birthing, adoptive, and surrogate parents.
Unlimited paid time off in the U.S.; 30 vacation days in the U.K.
Visa sponsorship and support for long-term immigration pathways are available where applicable.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →