Senior GRC Specialist - SOC 2 & ISO 27001 Lead

Blitzy; Cambridge; On-site; GBP 120,000 - 180,000; Full time

Job summary

Blitzy, a Cambridge-based AI software platform, seeks a Staff GRC Specialist to own end-to-end SOC 2 Type II and ISO 27001 programs. You’ll partner with the Head of GRC, drive audit readiness, and operate Vanta as the system of record while reducing audit friction for engineers and stakeholders.

You’ll design compliance processes, guide internal teams, and help advance FedRAMP efforts. Strong writing and mentoring are essential for shaping Blitzy’s governance vision.

Qualifications

• 10+ years of experience in compliance assurance, controls and technology risk management.
• Bachelor’s in information system, computer science or a related field.
• Hands-on ownership of at least one SOC 2 Type II or ISO 27001:2022 audit cycle.
• Direct experience running an automated GRC/compliance platform (Vanta or equivalent).
• Track record of managing multiple compliance initiatives and stakeholder/vendor relationships.

Responsibilities

• Lead core compliance assurance programs, including SOC 2 Type II and ISO 27001:2022 readiness end to end.
• Manage auditor and partner relationships directly, keeping management informed on scope and findings.
• Own the automated GRC platform as the system of record — configuring tests, keeping evidence current, and closing gaps before they become findings.
• Design and build the compliance processes that don't exist yet.
• Evaluate evidence critically rather than take it at face value.
• Set the standard for security questionnaire and customer compliance responses, taking questions and evidence requests off internal stakeholder's plate.
• Contribute to defining the strategic governance and compliance vision and plans aligned with general Blitzy business priorities.
• Contribute, support and eventually drive some of the wide range of GRC responsibilities, including third party and vendor risk management, customer trust and sales enablement and BC/DR governance.

Skills

SOC 2 Type II

ISO 27001

GRC platform

Audit readiness

Stakeholder mgmt

Education

Bachelor's in information systems or CS

Tools

Vanta

Job description

Blitzy, a Cambridge-based AI software platform, seeks a Staff GRC Specialist to own end-to-end SOC 2 Type II and ISO 27001 programs. You’ll partner with the Head of GRC, drive audit readiness, and operate Vanta as the system of record while reducing audit friction for engineers and stakeholders.

You’ll design compliance processes, guide internal teams, and help advance FedRAMP efforts. Strong writing and mentoring are essential for shaping Blitzy’s governance vision.