Own customer security reviews, compliance programs (SOC 2, ISO 27001), and audits with AI-assisted workflows.
Evaluate security requirements, vendor risks, and compliance gaps, and drive remediation to completion.
Build scalable processes, automation, and self-service resources to reduce repetitive GRC work.
A fast-moving technology company building scalable GRC and security processes in a remote-first environment. The organization values autonomy, ownership, and AI-powered efficiency, with a lean team and high-impact roles.
Manage SOC 2, HITRUST, and ISO 27001 audits, including internal control testing and external assessments.
Serve as the GRC subject matter expert, maintaining the risk register, compliance policies, and trust center.
Partner with Engineering, Product, People, and Legal to automate GRC tasks and report posture to leadership.
Garner Health uses clinical data and incentives to steer members toward higher-quality, lower-cost care in partnership with employers. We've doubled five years running, raised a Series E, and maintain a mission-driven, high-accountability culture.
Own delivery of standard-framework GRC engagements: ISO 27001, SOC 2, GDPR, PCI DSS, gap assessments, and audit readiness.
Build reusable IP by maintaining templates, control mappings, and AI-assisted playbooks with QA guardrails.
Own commercial outcomes including pricing, margins, utilization, and attach/renewal with Sales and CS.
Sprinto is an autonomous trust platform that centralizes compliance, audits, risk, and AI governance to keep organizations audit-ready. Backed by Accel and Elevation, Sprinto is a remote-first, high-trust company relied on by 4,000+ organizations.
Own customer security reviews and compliance programs, driving fast and accurate responses.
Ensure practical risk decisions and reliable security answers through automation and AI.
Scale the function by building processes and self-service resources."
The company is a technology company that builds quickly and focuses on security and compliance. It is a remote-first small team with a culture of autonomy and growth.
Drive implementation and continuous improvement of ISO 27001 ISMS and SOC 2 Type II compliance.
Own risk management, internal audits, security policies, and vendor security assessments.
Collaborate with engineering and DevOps on AWS security governance, incident response, and AI/LLM risk governance.
Insider One is an AI-powered marketing and customer engagement platform that unifies data, personalization, and journey orchestration across channels. With 1,500+ employees from 50+ nationalities and offices in over 30 countries, it is a diverse, socially progressive B2B SaaS unicorn backed by major investors.
Own Abnormal's governance committees, including AI, Data, and Security Governance.
Manage the enterprise policy program end-to-end, from drafting to stakeholder acknowledgment.
Oversee risk management operations, including risk assessments, exceptions, and audits.
Abnormal AI protects the humans behind the world's most critical organizations from AI-powered cybercrime. Over 5,000 enterprises trust our behavioral AI platform, and we offer a collaborative, fast-paced security culture.
Act as part vCISO and account manager, guiding clients through security and compliance programs.
Assess security posture, provide recommendations, and design programs using NIST, SOC 2, and ISO 27001.
Liaise with auditors and internal teams to translate programs into policies, procedures, and configurations.
Oneleet provides a platform for companies to build, manage, and monitor cybersecurity programs and achieve SOC 2 and ISO 27001. It raised a $33M Series A and is a fast-growing, remote-first team with an opinionated culture.
Own global certification programs like ISO 27001 and SOC 2, and advise engineering teams on secure development.
Collaborate directly with engineers to audit cloud infrastructure, CI/CD pipelines, and AI-driven security controls.
Assess risks of emerging technologies and drive continuous compliance improvements across the organization.
Picus Security is an exposure validation company that proves what attackers can exploit and what defenses stop, turning exposures into defensible decisions. As a fast-growing global remote team, it values continuous security validation and has a 95% recommendation rate.