GRC Compliance Specialist

Happyrobot Inc.; España; Presencial; EUR 55.000 - 78.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Salary + equity

Descripción de la vacante

HappyRobot Inc. is seeking a GRC Specialist to scale our compliance program and own the day-to-day operation of our GRC platform. You’ll automate evidence collection, coordinate audits, and be the main contact for customer security inquiries and external assessments.

This is a technical GRC role requiring collaboration with engineers to ensure robust, well-documented controls and a continuously audit-ready posture.

Formación

• 1–3 years of experience in GRC, IT Audit, or Security Compliance.
• Experience with SOC 2 or ISO 27001 audits is a plus.
• Ability to explain technical security controls to non-technical stakeholders.
• Familiarity with GRC automation platforms (Vanta/Drata/Secureframe).
• Strong written and verbal English communication.

Responsabilidades

• Maintain and improve our compliance posture for SOC 2 Type II and ISO 27001.
• Automate evidence collection and monitor control health in real time.
• Lead external audit cycles and coordinate with engineers.
• Manage customer security questionnaires and build a Trust Center.
• Conduct risk assessments and vendor security reviews.

Conocimientos

GRC

IT Audit

Security Compliance

SOC 2

ISO 27001

Security controls

Cloud security

Communication

Herramientas

Vanta

Drata

Secureframe

Descripción del empleo

About HappyRobot

HappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. Our AI workers don’t just communicate - they make decisions, take action, and run operations autonomously across voice, email, and enterprise systems. Born in Y Combinator (S23) and backed by a16z and Base10 with over $60M raised, we power critical operations for global enterprises worldwide.

Our platform is battle-tested in the most demanding environments - where AI has real consequences. We started in logistics, built our own voice stack, models, and orchestration layer from the ground up, and are now bringing that infrastructure to every enterprise that runs the real economy. Learn more about our vision in our manifesto.

About the Role

We are looking for a GRC Specialist to join our Security team. Your mission is to scale our compliance frameworks and ensure we maintain a “continuously audit-ready” state. You will own the day-to-day operations of our GRC platform, manage evidence collection, and act as the primary point of contact for customer security inquiries and external audits.

This is a technical GRC role : you won’t just be checking boxes; you will be working with engineers to automate evidence and ensure our security controls are robust and well-documented.

What You’ll Do

• Framework Management: Maintain and improve our compliance posture for SOC 2 Type II and ISO 27001. Assist in the roadmap for future certifications (e.g., HIPAA, GDPR).

• GRC Automation: Administer our GRC platform (e.g., Vanta, Drata) to automate evidence collection and monitor control health in real-time.

• Audit Coordination: Lead external audit cycles, acting as the main interface between auditors and our internal technical teams.

• Customer Trust: Own the security questionnaire process. Build and maintain a “Trust Center” or Knowledge Base to accelerate sales cycles by providing accurate security documentation to prospects.

• Risk Management: Conduct internal risk assessments and vendor security reviews to ensure our supply chain meets HappyRobot’s standards.

Must-Haves

• 1–3 years of experience in GRC, IT Audit, or Security Compliance.

• Proven experience working with SOC 2 or ISO 27001 (end-to-end audit experience is a plus).

• Ability to understand technical security controls (encryption, IAM, CI/CD, cloud logs) and explain them to non-technical stakeholders.

• Prior experience with GRC automation platforms (Vanta, Drata, Secureframe, or similar).

• Exceptional written and verbal communication in English. You will be drafting auditor-facing evidence and customer-facing security responses.

Nice-to-Haves

• Prior experience in a high-growth SaaS startup.

• CISA, CRISC, or similar certifications.

• Basic understanding of cloud infrastructure (AWS/GCP).

Why join us?

• Opportunity to work at a high-growth AI startup , backed by top investors.

• Rapidly growing and backed by top investors including a16z, Y Combinator, and Base10.

• Ownership & Autonomy - Take full ownership of projects and ship fast.

• Top-Tier Compensation - Competitive salary + equity in a high-growth startup.

• Work With the Best - Join a world-class team of engineers and builders

Our Operating Principles

_ Extreme Ownership _

We take full responsibility for our work, outcomes, and team success. No excuses, no blame-shifting — if something needs fixing, we own it and make it better. This means stepping up, even when it’s not “your job.” If a ball is dropped, we pick it up. If a customer is unhappy, we fix it. If a process is broken, we redesign it. We don’t wait for someone else to solve it — we lead with accountability and expect the same from those around us.

_ Craftsmanship _

Putting care and intention into every task, striving for excellence, and taking deep ownership of the quality and outcome of your work. Craftsmanship means never settling for “just fine.” We sweat the details because details compound. Whether it’s a product feature, an internal doc, or a sales call — we treat it as a reflection of our standards. We aim to deliver jaw-dropping customer experiences by being curious, meticulous, and proud of what we build — even when nobody’s watching.

_ We are “majos” _
Be friendly & have fun with your coworkers. Always be genuine & honest, but kind. “Majo” is our way of saying: be a good human. Be approachable, helpful, and warm. We’re building something ambitious, and it’s easier (and more fun) when we enjoy the ride together. We give feedback with kindness, challenge each other with respect, and celebrate wins together without ego.

_ Urgency with Focus _
Create the highest impact in the shortest amount of time. Move fast, but in the right direction. We operate with speed because time is our most limited resource. But speed without focus is chaos. We prioritize ruthlessly, act decisively, and stay aligned. We aim for high leverage: the biggest results from the simplest, smartest actions. We’re running a high-speed marathon — not a sprint with no strategy.

_ Talent Density and Meritocracy _
Hire only people who can raise the average; ‘exceptional performance is the passing grade.’ Ability trumps seniority. We believe the best teams are built on talent density — every hire should raise the bar. We reward contribution, not titles or tenure. We give ownership to those who earn it, and we all hold each other to a high standard. A-players want to work with other A-players — that’s how we win.

_ First-Principles Thinking _
Strip a problem to physics-level facts, ignore industry dogma, rebuild the solution from scratch. We don’t copy-paste solutions. We go back to basics, ask why things are the way they are, and rebuild from the ground up if needed. This mindset pushes us to innovate, challenge stale assumptions, and move faster than incumbents. It’s how we build what others think is impossible.