Chief Risk & Compliance Leader

Decisive Point; Sunnyvale (CA); Hybrid; USD 170,000 - 230,000; Full time

Job summary

Applied Intuition, Inc. is seeking a multifaceted Risk and Compliance Leader to drive security governance, risk management, and compliance across the org.

You will coordinate with Legal, Engineering, IT, and Operations to embed controls, manage audits, and oversee third-party risk, ensuring regulatory and contractual obligations are met. Ideal candidates bring 6+ years in security GRC, hands-on risk assessments, and experience with SOC 2, ISO 27001, and TISAX.

Qualifications

• 6+ years in security GRC, risk management, or compliance program ownership

Responsibilities

• Own and mature the security GRC program, including policy lifecycle management, risk register maintenance, and control framework alignment across the organization
• Conduct enterprise and product-level risk assessments to identify, prioritize, and track risks against the company's risk appetite
• Lead, manage and support compliance efforts such as SOC 2, ISO 27001, ISO 9001, TISAX, and federal/defense requirements
• Drive Third Party Risk Management (TPRM) program, including vendor assessments, contract security reviews, and ongoing monitoring of critical third parties
• Build and maintain the GRC program infrastructure - risk tracking, compliance tooling, reporting cadences, and executive-level risk reporting
• Partner with Legal, Engineering, IT, and Operations to embed compliance and risk requirements into business processes
• Develop and maintain security policies, standards, and procedures aligned to regulatory/contractual obligations
• Support customer-facing security assurance activities including questionnaires, audits, and contractual security reviews

Skills

Security GRC

Risk management

Compliance program ownership

Audit readiness

Vendor risk management

Cross-functional collaboration

Executive communication

Tools

Vanta

Drata

OneTrust

Job description

Applied Intuition, Inc. is seeking a multifaceted Risk and Compliance Leader to drive security governance, risk management, and compliance across the org.

You will coordinate with Legal, Engineering, IT, and Operations to embed controls, manage audits, and oversee third-party risk, ensuring regulatory and contractual obligations are met. Ideal candidates bring 6+ years in security GRC, hands-on risk assessments, and experience with SOC 2, ISO 27001, and TISAX.