Governance, Risk, and Compliance Manager

TensorWave; Las Vegas (NV); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Stock Options

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Paid Holidays

Parental Leave

Life Insurance

Short/Long Term Disability

Pet & Legal Insurance

Job summary

TensorWave is seeking a Governance, Risk & Compliance Manager to own the GRC framework end-to-end, designing controls and maturing them toward enterprise standards. You’ll run in-house audits, stand up third‑party risk governance, and provide leadership with risk visibility.

You’ll build scrappy but compliant processes in a startup and mature them for larger scale, aligning controls with business needs and regulatory expectations while supporting growth.

Qualifications

• 5–8+ years in Information Security, IT Audit, or GRC.
• Hands-on experience designing, implementing, and defending controls for SOC 2 Type II, ISO 27001, SOX, and/or PCI DSS.
• Strong knowledge of Sarbanes-Oxley compliance and evidence prep to AICPA/PCAOB standards.
• Experience spanning startup to enterprise or Big 4 audit environments.
• Hands-on ownership mindset, not only program oversight.

Responsibilities

• Own the GRC framework end to end, including ITGCs across a growing regulatory landscape.
• Run in-house audits and mature certifications toward automated evidence collection.
• Build and test internal controls over financial reporting (ICFR) aligned to standards.
• Stand up automated vendor risk program for a complex SaaS ecosystem.
• Operate a formal risk register and review quarterly with leadership.
• Create a centralized Trust Center to streamline security questionnaires.
• Embed compliance into the development lifecycle and CI/CD pipelines.
• Maintain a policy suite that satisfies legal and security requirements.

Skills

Information Security

IT Audit

GRC

SOC 2 Type II

ISO 27001

SOX

PCI DSS

Vendor risk

Compliance ownership

Tools

Vanta

Drata

Job description

About TensorWave

Our mission is simple: deliver seamless, secure, reliable, and resilient AI compute at scale. We've built a versatile cloud platform that eliminates infrastructure barriers, empowering builders to focus on innovation instead of fighting their stack. Because breakthrough AI should move at the speed of ideas, not infrastructure.

About the Role

As our first dedicated Governance, Risk & Compliance Manager, you'll own the GRC framework end to end. This is the person who turns security from a checkbox into a competitive advantage building the continuous compliance posture that shortens enterprise sales cycles, unlocks larger contracts, and prepares us for stricter regulatory oversight and future liquidity events. You'll operate as a senior individual contributor with broad ownership: designing controls, running audits inhouse, standing up vendor risk governance, and giving leadership real visibility into risk. You know how to build scrappy but compliant processes at a startup and how to mature them toward enterprise standards and you know the difference.

What You’ll Do

• Own the GRC framework. Design, implement, and continuously test a unified controls framework, including IT General Controls (ITGCs), across a growing regulatory landscape.
• Run audits inhouse. Maintain and mature our SOC 2 Type II and ISO 27001 certifications, driving toward automated, continuous evidence collection instead of manual scramble before audit cycles.
• Build the SOX roadmap. Design and test internal controls over financial reporting (ICFR) and ITGCs aligned to AICPA / PCAOB standards, delivering a gap analysis and remediation roadmap that keeps us futureready.
• Stand up vendor & third party risk. Replace manual, adhoc vendor reviews with an automated, enterprise grade third party risk program built for a complex SaaS ecosystem.
• Operationalize a risk register. Run formal, continuous internal risk assessments, map them to a corporate risk register, and review it quarterly with leadership to prioritize security spend.
• Enable the business. Build and maintain a centralized Trust Center that cuts the time sales and engineering spend answering security questionnaires.
• Shift compliance left. Partner with engineering to embed compliance into the development lifecycle so new features ship without breaking existing controls.
• Optimize the policy program. Maintain a policy suite that satisfies legal and security requirements while minimizing overhead on the teams that support our growth.

Who You Are

Required Qualifications

• 5–8+ years in Information Security, IT Audit, or GRC.
• Hands‑on has experience designing, implementing, and defending controls for SOC 2 Type II, ISO 27001, SOX, and/or PCI DSS.
• Strong working knowledge of SarbanesOxley compliance, including evidence preparation to AICPA or PCAOB standards.
• A track record spanning both fast‑paced Series B/C startups and a mature enterprise or Big 4 audit environment: you've built processes from scratch and you've seen what "good" looks like at scale.
• Comfortably operates as a hands‑on owner, not just a program overseer.

Preferred Qualifications

• Experience with APIdriven / continuous GRC tooling (e.g., Vanta, Drata, or similar).
• Exposure to cloud or GPU infrastructure security.
• Relevant certifications (CISA, CISSP, CRISC, ISO 27001 Lead Auditor/Implementer).
• Experience embedding compliance into CI/CD pipelines.

What We Offer

• Stock Options
• 100% paid Medical, Dental, and Vision insurance for Employees
• Company Health Savings Account Contributions
• 100% paid Short Term and Long Term Disability Insurance for Employees
• Life and Voluntary Supplemental Insurance Options
• Other Insurance Options, such as Pet & Legal Insurance
• Various Supplementary Health Benefits, such as discounted Virtual Healthcare Appointments and Serious Illness Support
• Flexible Spending Account
• 401(k)
• Employee Assistance Program
• Flexible TPO
• Paid Holidays
• Parental Leave
• Other In-Office Perks

Equal Employment Opportunity

TensorWave is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of any protected status under applicable law.

Reasonable Accommodations

TensorWave provides reasonable accommodations in accordance with applicable laws. If you require accommodation during the hiring process, please contact [e-mail].

Employment Eligibility

All offers of employment are contingent upon verification of identity and authorization to work in United States, as required by law.

Background Checks

Where permitted by law, employment may be contingent upon the successful completion of a job‑related background check.

Data Privacy Notice

By submitting an application, you acknowledge that TensorWave may collect, use, and retain your personal information for recruiting and employment‑related purposes in accordance with applicable data privacy laws.