Security GRC Lead

Highlights

• Own SOC 2, ISO 27001 and next frameworks as first GRC hire.
• Build customer-audit machine with sub-48-hour questionnaire SLA.
• Use frontier AI daily to automate evidence and questionnaire work.

What they offer

• Bi-annual performance bonus structure
• Generous equity grant vested over 4 years
• Up to $15k relocation bonus
• $10K housing bonus (if you live within 0.5 miles of office)
• $1.5K monthly stipend for meals
• Free Equinox membership
• $200 monthly laundry reimbursement
• $200 monthly personal wellness reimbursement
• Health, Dental, Vision insurance

Ideal candidate

Seasoned GRC owner who thrives as a first hire, closing enterprise deals through rigorous assurance. Pragmatic, AI-native builder who writes controls in code and communicates clearly with auditors and customers.

Requirements

• 7+ years in security GRC, compliance engineering, or audit, with 2+ years owning SOC 2 Type 2 end-to-end
• Shipped at least one ISO 27001 certification from kickoff to certificate including Stage 1 and Stage 2
• Fluent in Vanta (or Drata, Secureframe, Sprinto) at integration and admin level with custom tests
• Translates cloud-security findings to auditor language and maps controls accurately
• Writes controls as code or queries evidence with Python, SQL or shell
• Direct experience with SIG, CAIQ, enterprise questionnaires and on-site auditor sessions