Senior GRC & AI Compliance Lead

Valence; United States; Hybrid; USD 130,000 - 190,000; Full time

Benefits offered by this job

WFH stipend

Phone stipend

Workspace support

Job summary

Valence is seeking an experienced Governance, Risk & Compliance (GRC) Manager to mature and scale Valence's security and compliance program. In this role, you will partner with Engineering, Product, IT, Sales, and Operations to ensure our security program remains effective while enabling the business to move quickly.

This is a highly cross-functional role focused on audits, risk assessments, policies, and controls, turning compliance from a reactive exercise into a scalable business capability

Qualifications

• Experience managing GRC or security compliance programs.
• Desire to automate GRC tasks, including with AI.
• Strong understanding of SOC 2, ISO 27001, NIST CSF and ISO 42001.
• Experience with risk management methodologies and risk registers.
• Experience coordinating internal and external audits.
• Experience cross-functional collaboration with Engineering, IT, Legal, Privacy.

Responsibilities

• Own the day-to-day operation of Valence's GRC program.
• Coordinate audits and risk assessments; maintain policies and controls.
• Support customer security questionnaires and due diligence.
• Partner with Engineering to ensure controls meet compliance.
• Develop security metrics and executive reporting.
• Build scalable governance processes as the company grows.

Skills

GRC management

Audits coordination

Risk assessment

Policy & controls

Cross-functional collaboration

Communication

Cloud security awareness

Tools

Vanta

Drata

OneTrust

Secureframe

Archer

Job description

Valence is seeking an experienced Governance, Risk & Compliance (GRC) Manager to mature and scale Valence's security and compliance program. In this role, you will partner with Engineering, Product, IT, Sales, and Operations to ensure our security program remains effective while enabling the business to move quickly.

This is a highly cross-functional role focused on audits, risk assessments, policies, and controls, turning compliance from a reactive exercise into a scalable business capability