AI-First GRC Manager: Scale Security & Compliance

Valence; New York (NY); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health coverage

WFH stipend

Phone stipend

WeWork or similar space

Job summary

Valence is seeking a Governance, Risk & Compliance (GRC) Manager to mature and scale our security and compliance program. You will partner with Engineering, Product, IT, Sales, and Operations to keep the program effective while enabling rapid business growth.

You will own the operational side of the GRC program, manage audits, risk assessments, and policy controls, and help turn compliance into a scalable business capability across the organization.

Qualifications

• Experience leading GRC or security compliance programs.
• Desire to automate GRC tasks, including with AI.
• Strong understanding of SOC 2, ISO 27001, NIST CSF and ISO 42001.
• Experience with risk management methodologies and maintaining risk registers.
• Experience coordinating internal and external audits.
• Experience collaborating across Engineering, IT, Legal, Privacy and business stakeholders.
• Strong organizational and project management skills.
• Excellent written and verbal communication.
• Familiarity with cloud security concepts (AWS/Azure).
• Experience with GRC platforms such as Vanta, Drata, Secureframe, OneTrust, Archer or similar.
• Familiarity with privacy regulations and AI governance (GDPR, EU AI Act).

Responsibilities

• Own the day-to-day operation of Valence's GRC program.
• Maintain and improve Information Security and AI Management System for ISO 27001/42001.
• Coordinate SOC 2, ISO 27001, ISO 42001 and other certification efforts.
• Manage the security risk register and facilitate enterprise risk assessments.
• Coordinate internal and external audits.
• Manage security policies, standards, and control documentation.
• Track remediation activities and drive control improvements across teams.
• Support customer security questionnaires, RFPs, and due diligence.
• Partner with Engineering to ensure technical controls meet compliance requirements.
• Help develop security metrics and executive reporting.
• Coordinate annual control testing and evidence collection.
• Build scalable governance processes as the company grows.

Skills

GRC Management

GRC Automation

SOC 2

ISO 27001

NIST CSF

ISO 42001

Risk Assessment

Audits

Cross-functional Collaboration

Cloud Security

GRC Tools

Tools

Vanta

Drata

Secureframe

OneTrust

Archer

Job description

Valence is seeking a Governance, Risk & Compliance (GRC) Manager to mature and scale our security and compliance program. You will partner with Engineering, Product, IT, Sales, and Operations to keep the program effective while enabling rapid business growth.

You will own the operational side of the GRC program, manage audits, risk assessments, and policy controls, and help turn compliance into a scalable business capability across the organization.