Senior GRC Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 11 hours agoStatus: Live

Job Summary

Own day-to-day governance, risk, and compliance operations for a fast-scaling SaaS business, including user access reviews, security awareness/phishing simulation support, risk assessments, third-party risk, and continuous control monitoring. Administer the GRC platform to keep evidence automation healthy and maintain audit readiness across SOC 2, HIPAA, ISO 27001/27701/42001, and GDPR. Partner cross-functionally to drive remediation, control maturity, and audit leadership over time.

Location: San Mateo

Workplace: Onsite

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Own day-to-day GRC operations, including user access reviews and certifications, security awareness/phishing or deepfake simulation facilitation, JML tracking, and enforcement of policy/control exceptions.
•Run the risk management program, performing risk assessments, maintaining the risk register, partnering on remediation, and tracking issues through closure.
•Manage third-party risk by running vendor/subprocessor risk assessments, conducting ongoing monitoring, and tracking remediation across critical vendors.
•Design and execute internal audits to test control effectiveness and coordinate evidence, control owners, and remediation for external audit cycles.
•Administer the GRC platform to keep automated control tests and evidence healthy, maintain audit readiness year-round, and translate program data into insights and metrics.

Key Requirements

•5-7 years of experience in GRC, IT audit, information security, or a closely related field.
•Working knowledge of major security and privacy frameworks including SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR, or CCPA.
•Experience with GRC platforms such as Anecdotes, Vanta, Drata, Secureframe, OneTrust, or ServiceNow GRC.
•Experience running user access reviews and familiarity with identity and access concepts like RBAC, least privilege, segregation of duties, and JML processes.
•Hands-on experience administering a security awareness or phishing/deepfake simulation platform (e.g., Adaptive Security, KnowBe4, Hoxhunt, Proofpoint).

Experience:5-7 yearsSaaS

Skills:Written communicationDetail-orientedOrganizedCollaboration

Languages:English

Tech Stack:SOC 2HIPAAISO 27001ISO 27701ISO 42001GDPRCCPANIST CSFGRC platformsAnecdotesVantaDrataSecureframeOneTrustServiceNow GRCAdaptive SecurityKnowBe4HoxhuntProofpointAWS

Company Brief

Fireworks AI

Develops AI-driven tools to generate and optimize visual marketing content for brands and creators, automating production of short-form videos and multimedia assets for social platforms to improve engagement and scale creative workflows.

Industry: SaaS

Website

Loading job details...

Preparing the role view and application actions.

Fireworks AI

2 weeks ago

Senior GRC Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 11 hours agoStatus: Live

Job Summary

Location: San Mateo

Workplace: Onsite

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Own day-to-day GRC operations, including user access reviews and certifications, security awareness/phishing or deepfake simulation facilitation, JML tracking, and enforcement of policy/control exceptions.
•Run the risk management program, performing risk assessments, maintaining the risk register, partnering on remediation, and tracking issues through closure.
•Manage third-party risk by running vendor/subprocessor risk assessments, conducting ongoing monitoring, and tracking remediation across critical vendors.
•Design and execute internal audits to test control effectiveness and coordinate evidence, control owners, and remediation for external audit cycles.
•Administer the GRC platform to keep automated control tests and evidence healthy, maintain audit readiness year-round, and translate program data into insights and metrics.

Key Requirements

•5-7 years of experience in GRC, IT audit, information security, or a closely related field.
•Working knowledge of major security and privacy frameworks including SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR, or CCPA.
•Experience with GRC platforms such as Anecdotes, Vanta, Drata, Secureframe, OneTrust, or ServiceNow GRC.
•Experience running user access reviews and familiarity with identity and access concepts like RBAC, least privilege, segregation of duties, and JML processes.
•Hands-on experience administering a security awareness or phishing/deepfake simulation platform (e.g., Adaptive Security, KnowBe4, Hoxhunt, Proofpoint).

Experience:5-7 yearsSaaS

Skills:Written communicationDetail-orientedOrganizedCollaboration

Languages:English

Tech Stack:SOC 2HIPAAISO 27001ISO 27701ISO 42001GDPRCCPANIST CSFGRC platformsAnecdotesVantaDrataSecureframeOneTrustServiceNow GRCAdaptive SecurityKnowBe4HoxhuntProofpointAWS

Company Brief

Fireworks AI

Industry: SaaS

Website