Governance, Risk and Compliance Lead

Thinking Machines Lab
San Francisco
Workplace: HybridFull timeUSD 225,000 - 350,000 annuallyFunction: Legal, Risk & ComplianceSkills: ["Technical fluency","Communication","Translating technical requirements"]

Drive governance, risk, and compliance certifications end to end—from scoping SOC 2, ISO 27001, FedRAMP (and others) through audit close—collecting evidence, writing control documentation, and directly supporting auditors. Run recurring compliance processes like control testing, audit prep, risk register maintenance, and policy attestations. Partner with security, legal, safety, and engineering to answer compliance and risk questions, translate GDPR/EU AI Act requirements into controls, and build a multi-quarter GRC roadmap while improving audit-cycle tooling and documentation.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Thinking Machines Lab
Thinking Machines Lab
16 hours ago

Governance, Risk and Compliance Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Drive governance, risk, and compliance certifications end to end—from scoping SOC 2, ISO 27001, FedRAMP (and others) through audit close—collecting evidence, writing control documentation, and directly supporting auditors. Run recurring compliance processes like control testing, audit prep, risk register maintenance, and policy attestations. Partner with security, legal, safety, and engineering to answer compliance and risk questions, translate GDPR/EU AI Act requirements into controls, and build a multi-quarter GRC roadmap while improving audit-cycle tooling and documentation.
Location: San Francisco
Workplace: Hybrid
Employment Type: Full time
Job Function: Legal, Risk & Compliance

Key Responsibilities

  • •Own the certification roadmap end to end: scope certifications, build the control set, collect and organize evidence, and represent the company to auditors through close.
  • •Manage recurring compliance processes on a cadence, including control testing, audit prep/response, risk register maintenance, and policy attestations.
  • •Answer compliance and risk questions from engineering, security, and product teams by applying technical fluency across infrastructure, model deployment, and data handling.
  • •Track regulatory and framework requirements for an AI company (including GDPR and the EU AI Act) and translate them into actionable controls.
  • •Identify compliance coverage gaps as products, infrastructure, and jurisdictions expand, and propose changes; maintain tooling/documentation and plan a multi-quarter GRC roadmap.

Pay and Benefits

Salary: USD 225,000 - 350,000 annually
Perks:Health InsuranceDentalVisionPaid LeaveRelocation

Key Requirements

  • •7+ years of related experience across technology and cybersecurity GRC, with breadth across governance, risk, and compliance.
  • •Experience leading a SOC 2, ISO 27001, FedRAMP, or comparable certification from scoping through audit close.
  • •Hands-on experience collecting audit evidence and writing control documentation.
  • •Experience managing a recurring compliance process such as control testing, risk register maintenance, or policy attestations.
  • •Ability to learn new technical domains quickly and translate them for non-technical stakeholders.
Experience:GRCCybersecurity
Skills:Technical fluencyCommunicationTranslating technical requirements
Certifications:SOC 2ISO 27001FedRAMP
Tech Stack:AI agents

Eligibility

Work Authorization:Sponsorship available.

Company Brief

Thinking Machines Lab
Develops enterprise AI solutions, custom large language models, and ML platforms to help organizations deploy intelligent applications. Services include data engineering, model development, and AI consulting for scale and production readiness.
Industry: AI & Machine Learning
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: Mumbai, India
Website