GRC Manager: Build Enterprise-Grade Security & Compliance

Doist; Las Vegas (NV); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Stock Options

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Paid Holidays

Parental Leave

Life Insurance

Short/Long Term Disability

Pet & Legal Insurance

Job summary

TensorWave is seeking a Governance, Risk & Compliance Manager to own the GRC framework end-to-end, designing controls and maturing them toward enterprise standards. You’ll run in-house audits, stand up third‑party risk governance, and provide leadership with risk visibility.

You’ll build scrappy but compliant processes in a startup and mature them for larger scale, aligning controls with business needs and regulatory expectations while supporting growth.

Qualifications

• 5–8+ years in Information Security, IT Audit, or GRC.
• Hands-on experience designing, implementing, and defending controls for SOC 2 Type II, ISO 27001, SOX, and/or PCI DSS.
• Strong knowledge of Sarbanes-Oxley compliance and evidence prep to AICPA/PCAOB standards.
• Experience spanning startup to enterprise or Big 4 audit environments.
• Hands-on ownership mindset, not only program oversight.

Responsibilities

• Own the GRC framework end to end, including ITGCs across a growing regulatory landscape.
• Run in-house audits and mature certifications toward automated evidence collection.
• Build and test internal controls over financial reporting (ICFR) aligned to standards.
• Stand up automated vendor risk program for a complex SaaS ecosystem.
• Operate a formal risk register and review quarterly with leadership.
• Create a centralized Trust Center to streamline security questionnaires.
• Embed compliance into the development lifecycle and CI/CD pipelines.
• Maintain a policy suite that satisfies legal and security requirements.

Skills

Information Security

IT Audit

GRC

SOC 2 Type II

ISO 27001

SOX

PCI DSS

Vendor risk

Compliance ownership

Tools

Vanta

Drata

Job description

TensorWave is seeking a Governance, Risk & Compliance Manager to own the GRC framework end-to-end, designing controls and maturing them toward enterprise standards. You’ll run in-house audits, stand up third‑party risk governance, and provide leadership with risk visibility.

You’ll build scrappy but compliant processes in a startup and mature them for larger scale, aligning controls with business needs and regulatory expectations while supporting growth.