Senior GRC & Compliance Lead

Blitzy; Cambridge (MA); On-site; USD 160,000 - 240,000; Full time

Job summary

Blitzy, an AI software development platform in Cambridge, MA, seeks a Staff GRC Specialist to own and run our SOC 2 Type II and ISO 27001 programs end to end. You will operate Vanta as the system of record and partner with engineering to reduce security questions and evidence requests while guiding audit readiness.

You will design new compliance processes, help drive our FedRAMP effort, and collaborate with auditors and stakeholders to ensure a fast, low-friction verification process.

Qualifications

• 10+ years of experience in compliance assurance, controls and technology risk management.
• Bachelor’s in information system, computer science or a related field.
• Ownership of at least one full SOC 2 Type II or ISO 27001:2022 audit cycle.
• Experience running an automated GRC/compliance platform (Vanta or equivalent).
• Ability to manage multiple compliance initiatives and relationships independently.
• Ability to reduce stakeholder interrupt load and communicate clearly.

Responsibilities

• Lead SOC 2 Type II and ISO 27001:2022 readiness end to end.
• Manage auditor and partner relationships and report findings to leadership.
• Own the automated GRC platform as the system of record and close gaps.
• Design and build new compliance processes as needed.
• Evaluate evidence critically and coordinate with stakeholders to respond to questions.
• Set standards for security questionnaires and customer responses.
• Contribute to governance and compliance strategy aligned with Blitzy priorities.
• Drive vendor risk management, customer trust, and BC/DR governance as needed.

Skills

Compliance leadership

Risk management

Auditing

Policy writing

Education

Bachelor’s in information systems or computer science

Tools

Vanta

Job description

Blitzy, an AI software development platform in Cambridge, MA, seeks a Staff GRC Specialist to own and run our SOC 2 Type II and ISO 27001 programs end to end. You will operate Vanta as the system of record and partner with engineering to reduce security questions and evidence requests while guiding audit readiness.

You will design new compliance processes, help drive our FedRAMP effort, and collaborate with auditors and stakeholders to ensure a fast, low-friction verification process.