7 часов назад
GRC Manager (AI)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Governance, Risk & Compliance (GRC) Manager (AI): Operating and scaling Valence's security and compliance program across audits, risk assessments, policies, controls, and customer assurance with an accent on SOC 2, ISO 27001, ISO 42001, NIST CSF, and AI governance. Focus on coordinating certification efforts, translating control requirements into practical guidance, automating GRC operations, and driving remediation across cross-functional teams.
Location: Remote; must generally support Eastern Time working hours and have valid travel documents without work authorization restrictions in the US.
Company
develops an AI-native coaching platform for enterprise leaders and employees, using machine learning and natural language processing for personalized learning and development.
What you will do
- Own the day-to-day operation and continuous improvement of the GRC program.
- Maintain the Information Security and Artificial Intelligence Management Systems for ISO 27001 and ISO 42001.
- Coordinate SOC 2, ISO 27001, ISO 42001, and other certification efforts, including audits, control testing, and evidence collection.
- Manage the security risk register, facilitate enterprise risk assessments, and track remediation activities.
- Maintain security policies, standards, and control documentation while driving practical control improvements.
- Support customer security questionnaires, RFPs, due diligence, executive reporting, and collaboration with Engineering and other business functions.
Requirements
- Experience managing GRC or security compliance programs.
- Strong understanding of SOC 2, ISO 27001, NIST CSF, and ISO 42001.
- Experience with risk management, risk registers, internal and external audits, and cross-functional stakeholder coordination.
- Strong organizational, project management, written communication, and verbal communication skills.
- Ability to interpret control requirements and translate them into practical implementation guidance.
- Familiarity with cloud security concepts, preferably AWS or Azure.
Nice to have
- Experience with GRC platforms such as Vanta, Drata, Secureframe, OneTrust, Archer, or similar.
- Familiarity with privacy regulations and AI governance, including GDPR and the EU AI Act.
- Experience automating GRC tasks with AI.
Culture & Benefits
- Direct responsibility for company-defining projects and collaboration with the executive team.
- Exposure to enterprise AI implementations across Fortune 500 companies and multiple industries.
- Competitive salary with base pay and bonuses, plus meaningful equity in a venture-backed company.
- Medical, dental, and vision coverage from day one, along with paid parental leave and generous PTO.
- Company-wide R&R shutdowns, retirement plan support for US and global employees, and work-from-home, phone, and coworking stipends.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →