GRC Compliance Lead

Job Summary

Supporting an external software development organization, the remote GRC Compliance Lead will define, operate, and mature a compliance program focused on SOC 2 and ISO readiness while ensuring practical governance, risk, and compliance practices for an enterprise AI platform.

Key responsibilities

• Define and implement compliance controls, evidence collection, and audit preparation for a multi-tenant enterprise platform
• Prepare customer-facing security documentation and collaborate with engineering and security teams to ensure compliance is integrated into workflows
• Partner with stakeholders to support audit readiness and customer security reviews while maintaining credible compliance standards

Required qualifications

• Experience managing or supporting a security, governance, risk, or compliance program in a B2B SaaS or enterprise software environment
• Familiarity with SOC 2, ISO 27001, or similar compliance frameworks
• Proven ability to define controls, collect evidence, and prepare for audits and compliance assessments
• Experience preparing security documentation, policies, and compliance materials for customer assurance
• Strong collaboration skills to work effectively with engineering, security teams, and client stakeholders