Senior GRC Analyst

Turing; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Frontier AI projects

Conference exposure

Collaborative team environment

Job summary

Turing, headquartered in San Francisco, is seeking a Senior GRC Analyst to lead governance, risk, and compliance activities across the company and serve as a trusted partner to engineering and business teams as they meet security obligations.

You will own audits (SOC 2, ISO 27001), maintain a robust control framework, run risk assessments, and manage vendor risk, enabling scalable security across our enterprise workloads.

Qualifications

• 4+ years in GRC, compliance, audit, or risk.
• Hands-on experience supporting or leading SOC 2 and/or ISO 27001 audits.
• Understanding of control frameworks and risk assessment methodologies.
• Experience with vendor risk management and risk-based controls.

Responsibilities

• Own and coordinate compliance audits and certifications (SOC 2, ISO 27001, and others).
• Maintain and improve our control framework, mapping controls across multiple frameworks.
• Conduct risk assessments—identifying, documenting, and tracking risks to resolution.
• Run the vendor/third-party risk program: security reviews of vendors and ongoing monitoring.
• Support customer security reviews and questionnaires, and help maintain the trust center.
• Develop, maintain, and socialize security policies and standards.
• Partner with control owners across the company to ensure controls are operating effectively, and drive remediation when they aren't.
• Identify opportunities to automate manual GRC work and partner with GRC engineering to implement them.

Skills

GRC operations

Organizational skills

Attention to detail

Clear communication

Multi-workstream management

Education

CISA

CISSP

CIPP

Tools

GRC tooling

Job description

Turing’s mission is to accelerate superintelligence to drive real economic progress. Headquartered in San Francisco, Turing works with frontier AI labs to generate high-quality datasets, reinforcement learning environments, and frontier research benchmarks that improve model capabilities in software engineering, enterprise knowledge work, and advanced STEM reasoning. In software engineering, Turing is the largest and longest-running data provider in the category. Turing also works with Fortune 500 enterprises across financial services, life sciences, healthcare, retail, automotive, and CPG to build and deploy end-to-end agentic AI systems inside mission-critical workflows. By operating on both sides, Turing closes the loop between frontier research and enterprise deployment, turning real-world deployment signals into better data, evaluations, and more capable models. Learn more at www.turing.com .

Senior GRC Analyst

About the role

We're looking for a Senior GRC Analyst to help run our governance, risk, and compliance program day to day. This is a strong individual-contributor role for someone who knows compliance frameworks inside and out, can lead audits with confidence, and can turn control requirements into practical work that teams across the company can actually execute.

You’ll own key parts of our compliance certifications, run risk and vendor assessments, maintain our control framework, and be a trusted partner to engineering and business teams as they meet their security and compliance obligations.

What you'll do

• Own and coordinate compliance audits and certifications (SOC 2, ISO 27001, and others), including evidence collection, auditor coordination, and remediation tracking.
• Maintain and improve our control framework, mapping controls across multiple frameworks to reduce duplicate work.
• Conduct risk assessments — identifying, documenting, and tracking risks to resolution.
• Run the vendor/third-party risk program: security reviews of vendors and ongoing monitoring.
• Support customer security reviews and questionnaires, and help maintain the trust center.
• Develop, maintain, and socialize security policies and standards.
• Partner with control owners across the company to ensure controls are operating effectively, and drive remediation when they aren't.
• Identify opportunities to automate manual GRC work and partner with GRC engineering to implement them.

What we’re looking for

• Several years of experience (typically 4+ years) in GRC, compliance, audit, or risk.
• Hands‑on experience supporting or leading SOC 2 and/or ISO 27001 audits.
• Solid understanding of control frameworks, risk assessment methodologies, and vendor risk management.
• Strong organization and attention to detail, with the ability to manage multiple workstreams and deadlines.
• Clear communicator who can work effectively with both technical and non‑technical teams.
• Comfort with GRC/compliance tooling.

Nice to have

• Relevant certifications (CISA, CISSP, CIPP, or similar).
• Experience with compliance automation and continuous controls monitoring.
• Familiarity with cloud environments and how technical controls are implemented.
• Experience supporting enterprise sales and customer security due diligence.

What success looks like

Within your first few months, you’ll own key parts of our audit and risk programs, be a go-to partner for control owners, and start turning manual GRC work into repeatable, increasingly automated processes.

Values

• We are client first: We put our clients at the center of everything we do, because their success is the ultimate measure of our value.
• We work at Start-Up Speed: We move fast, stay agile and favor action because momentum is the foundation of perfection
• We are AI forward: We help our clients build the future of Al and implement it in our own roles and workflow to amplify productivity.

Advantages of joining Turing

• Work at the frontier of AI, helping the world’s leading AI labs improve their most advanced models by building expert datasets, RL environments, and first-of-a-kind benchmarks.
• Contribute to leading-edge AI research and showcase your work at top conferences such as ICLR, ICML, and NeurIPS.
• Bring frontier AI innovation to the enterprise, applying lessons learned from leading AI labs to solve real‑world business challenges.
• Collaborate with and learn from exceptional colleagues with deep AI experience from Google, Meta, Amazon, and other leading technology companies.
• Move at the pace of AI innovation, with the speed, ownership, and impact of a startup.

Turing is proud to be an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, gender identity, sexual orientation, age, marital status, disability, protected veteran status, or any other legally protected characteristics. At Turing we are dedicated to building a diverse, inclusive and authentic workplaceand celebrate authenticity, so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.