Director of GRC & Compliance — Audit-Ready & Scalable

Elise A.I. Technologies Corp.; New York (NY); On-site; USD 200,000 - 275,000; Full time

Benefits offered by this job

Equity

Health coverage

Parental leave

Commuter benefits

401k

Wellness stipend

Office meals

Unlimited vacation

Relocation support

Job summary

EliseAI in New York seeks a Director of Governance, Risk, and Compliance (GRC) to scale risk and compliance programs, oversee audits, and align policies with SOC 1/2, PCI, HIPAA, HITRUST. You will lead cross-functional teams with Legal and Security, and build a high-performing GRC function to support rapid growth.

You will own audit relationships, define roadmaps, and mentor a growing team while driving third-party due diligence and vendor risk management.

Qualifications

• 8+ years of experience in Governance, Risk, and Compliance, Information Security, or a related field, with at least 3 years in a leadership or program ownership role
• Deep expertise across compliance frameworks including SOC1, SOC 2, PCI, HIPAA, and ISO certifications
• Proven track record managing audit programs end-to-end, including direct relationships with external auditors
• Experience building or scaling a GRC function, including team hiring and development
• Strong understanding of vendor risk management, third-party due diligence, and risk-based decision-making
• Ability to translate complex compliance and risk topics for executive and board-level audiences
• Excellent cross-functional influencing skills — comfortable working with Legal, Engineering, and business leadership
• Willingness to work in person at our office 4-5 days a week

Responsibilities

• Own and lead the company's GRC program, setting strategic direction across frameworks including SOC 1, SOC 2, PCI, HITRUST, and HIPAA
• Serve as the primary owner of audit relationships, overseeing planning, evidence collection, documentation, and auditor communications
• Define and enforce compliance roadmaps, ensuring cross-functional alignment and accountability on regulatory requirements
• Attract top-tier talent to scale the GRC team, providing mentorship, setting priorities, and managing team performance
• Oversee the vendor risk management program, including third-party due diligence, risk tiering, and escalation of critical findings
• Lead reviews of vendor and client security questionnaires (DDQs) in partnership with Security Engineering, with final sign-off authority
• Own the security and compliance policy framework — driving creation, review cycles, and organization-wide adoption
• Partner with Legal and Security leadership on security-related contractual obligations, including review and negotiation of security addenda

Skills

GRC leadership

Audit management

Regulatory frameworks

Vendor risk management

Third-party due diligence

Executive communication

Cross-functional influence

Information security knowledge

Policy development

Risk management

Education

Bachelor's degree in a related field

Job description

EliseAI in New York seeks a Director of Governance, Risk, and Compliance (GRC) to scale risk and compliance programs, oversee audits, and align policies with SOC 1/2, PCI, HIPAA, HITRUST. You will lead cross-functional teams with Legal and Security, and build a high-performing GRC function to support rapid growth.

You will own audit relationships, define roadmaps, and mentor a growing team while driving third-party due diligence and vendor risk management.