GRC Policy & Risk Lead (ISO 27001)

Abnormal AI; United States; Remote; USD 100,000 - 140,000; Full time

Job summary

Abnormal AI is seeking a governance, risk and compliance professional to own and mature our policy program across AI, data and security domains. You will drive governance processes, assess controls, and collaborate with security and product teams to embed risk-aware practices.

With 4-7 years in cybersecurity or technical compliance and ISO 27001 experience, you will manage risk assessments, exceptions, and support audits. This is a fast-paced, collaborative role in a security-focused culture.

Qualifications

• 4-7 years in cybersecurity, GRC, or technical compliance with ISO 27001 experience.
• Analytical, self-motivated team player with strong project management skills.

Responsibilities

• Drive governance committees and policy management end-to-end.
• Own risk management operations, including risk assessments and exceptions.
• Support audit readiness, control evaluation, and issue remediation.

Skills

GRC experience

ISO 27001

Project management

Analytical thinking

Job description

Abnormal AI is seeking a governance, risk and compliance professional to own and mature our policy program across AI, data and security domains. You will drive governance processes, assess controls, and collaborate with security and product teams to embed risk-aware practices.

With 4-7 years in cybersecurity or technical compliance and ISO 27001 experience, you will manage risk assessments, exceptions, and support audits. This is a fast-paced, collaborative role in a security-focused culture.