Governance, Risk and Compliance Lead (AI)

TL;DR

Governance, Risk and Compliance Lead (AI): Driving certifications (SOC 2, ISO 27001, FedRAMP) and managing day-to-day compliance processes for an AI research lab with an accent on technical evidence collection and regulatory translation. Focus on building a scalable GRC roadmap, navigating AI-specific regulations like the EU AI Act, and managing end-to-end audit cycles.

Location: Based in San Francisco, California. Relocation support is available.

Salary: $225,000 - $350,000

Company

Thinking Machines Lab is an AI research organization focused on advancing collaborative general intelligence through the creation of advanced AI products and open-source projects.

What you will do

• Own the end-to-end certification roadmap (SOC 2, ISO 27001, FedRAMP), from scoping to audit closure.
• Manage recurring compliance processes, including control testing, risk register maintenance, and policy attestations.
• Provide direct technical guidance on compliance and risk questions to engineering, security, and product teams.
• Translate regulatory requirements such as GDPR and the EU AI Act into actionable technical controls.
• Identify compliance gaps as the company scales and propose necessary changes to prevent blockers.
• Design and maintain GRC tooling and documentation to optimize future audit cycles.

Requirements

• 7+ years of experience in technology and cybersecurity GRC.
• Proven track record of leading certifications like SOC 2, ISO 27001, or FedRAMP from scoping to close.
• Hands-on experience in collecting audit evidence and writing control documentation.
• Ability to quickly learn complex technical domains and translate them for stakeholders.
• Must be based in or able to relocate to San Francisco.

Nice to have

• Experience using AI agents and custom tooling to automate complex compliance requirements.
• Experience scaling GRC functions within a rapidly growing company.

Culture & Benefits

• Generous health, dental, and vision insurance.
• Unlimited PTO and paid parental leave.
• Visa sponsorship available for the right fit.
• Relocation support provided as needed.