Senior GRC Specialist

Highlights

• Own day-to-day GRC operations from access reviews to awareness programs.
• Run risk assessments and drive remediation to closure with owners.
• Build continuous control monitoring to keep audit readiness year-round.

What they offer

• Offers Equity

Ideal candidate

Detail-oriented collaborator with 5-7 years in GRC who enjoys operational ownership and partnering with engineers. You translate compliance into practical controls and thrive in fast-moving SaaS environments.

Requirements

• 5-7 years of experience in GRC, IT audit, information security, or a closely related field
• Working knowledge of major security and privacy frameworks such as SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR, or CCPA
• Experience with GRC platforms (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC)
• Experience running user access reviews and a solid understanding of identity and access management concepts (RBAC, least privilege, segregation of duties, JML processes)
• Hands-on experience administering a security awareness or phishing simulation platform (Adaptive Security, KnowBe4, Hoxhunt, Proofpoint, or similar)
• Comfort with cloud environments (AWS, GCP, or Azure) and how SaaS products are built and operated
• Strong written communication; you can translate control requirements and security concepts into language engineers, customers, and non-technical employees understand
• Detail-oriented and organized, with the ability to juggle multiple audits, campaigns, and deadlines
• A collaborative mindset; you enjoy working across teams rather than gatekeeping