Staff GRC Specialist (AI)

Location: Cambridge, MA, United States; onsite

Salary: $160,000–$240,000 base annually, plus bonus and equity.

Company

hirify.global is a Cambridge-based AI software development platform that autonomously builds custom enterprise software and serves customers including Fortune 500 companies.

What you will do

• Lead SOC 2 Type II and ISO 27001:2022 readiness and compliance assurance programs end to end.
• Manage auditor and compliance-partner relationships, including scope, findings, evidence, and management updates.
• Own and configure the automated GRC platform as the system of record, keeping tests and evidence current and closing gaps.
• Design compliance processes that do not yet exist and contribute to the strategic governance and compliance roadmap.
• Set standards for security questionnaires and customer compliance responses while reducing requests directed to internal stakeholders.
• Support third-party and vendor risk management, customer trust, sales enablement, BC/DR governance, and the FedRAMP effort.

Requirements

• 10+ years of experience in compliance assurance, controls, and technology risk management.
• Bachelor’s degree in information systems, computer science, or a related field.
• Hands-on ownership of at least one complete SOC 2 Type II or ISO 27001:2022 audit cycle.
• Direct experience as the primary owner of an automated GRC or compliance platform such as Vanta.
• Experience managing multiple compliance initiatives and independently handling auditor, stakeholder, and vendor relationships, with sound escalation judgment.
• Ability to reduce stakeholder interruption load and produce clear policies, audit narratives, and questionnaire responses that withstand scrutiny.
• Experience mentoring teammates or setting working standards for others.

Nice to have

• Vendor risk management and customer trust experience, including security questionnaires and sales enablement.
• Experience at an early-stage or high-growth technology company.
• FedRAMP exposure and experience building compliance processes from scratch.
• Experience managing multiple frameworks concurrently.
• CISSP, CISA, or CISM certification.

Culture & Benefits

• Fast-paced, decisive working style focused on innovation and customer value.
• High standards, in-person collaboration, and a team-oriented approach.
• Opportunity to work on advanced enterprise AI software and demanding compliance programs.
• Compensation includes base salary, bonus, and equity.
• Equal opportunity employer committed to a diverse and inclusive team.

Hiring process

• The interview includes a control-design walkthrough and an audit-management process walkthrough based on a real professional experience.