Senior Enterprise Risk Operations Lead

Reflection; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Top-tier compensation

Stock options

Health & wellness

Meals provided

Parental leave 22 weeks

Unlimited PTO (US)

Visa sponsorship

Team off-sites

Job summary

Reflection is seeking a Sr. Enterprise Risk Operations Specialist in San Francisco to translate risk governance into operational reality across governance, controls, and third-party risk management.

You will work with product, engineering, legal, and compliance to evidence risk posture, drive remediation, and support audits, regulatory inquiries, and customer due diligence in a dynamic AI environment. This is a high-visibility, high-impact contributor role requiring influence without direct

Qualifications

• 7+ years of progressive experience in risk operations, compliance, internal audit, information security, or a closely related discipline.
• Experience building and operating scalable risk programs: controls assurance, third-party risk management, issue management, or incident response.
• Hands-on experience delivering risk assessments, certifications, or security questionnaires in a go-to-market or enterprise sales context.
• Prior experience in technology risk operations with AI system risk evaluation and safety testing knowledge.
• Experience operating in regulated environments and interacting with auditors or regulators.

Responsibilities

• Drive end-to-end risk assessments and certifications supporting the deals pipeline and go-to-market efforts.
• Partner with sales, legal, and product teams to tailor risk reviews to customer requirements.
• Develop and maintain reusable risk artifacts, certifications, and evidence packages.
• Serve as a risk SME in customer conversations, due diligence requests, and RFP responses.
• Conduct upfront due-diligence assessments and ongoing risk monitoring of third parties and vendors.
• Define and maintain criteria for vendor risk tiering and onboarding requirements.
• Validate the design and operational efficacy of policies, standards, and controls.
• Operate risk issue management lifecycle and remediation tracking.
• Provide regular reporting on open issues and systemic risk trends to leadership.

Skills

risk management

operational excellence

audits

vendor risk

compliance

Tools

GRC platforms

evidence management systems

Job description

Reflection is seeking a Sr. Enterprise Risk Operations Specialist in San Francisco to translate risk governance into operational reality across governance, controls, and third-party risk management.

You will work with product, engineering, legal, and compliance to evidence risk posture, drive remediation, and support audits, regulatory inquiries, and customer due diligence in a dynamic AI environment. This is a high-visibility, high-impact contributor role requiring influence without direct