Senior GRC & Compliance Lead (Cross-Pillar)

Reflection; San Francisco (CA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Top-tier compensation

Stock options

Health & wellness

Meals

Paid parental leave

Unlimited vacation (US) / 30 days (UK)

Visa sponsorship

Team building

Job summary

Reflection AI is seeking a senior Compliance & AI Governance generalist to drive end-to-end programs across governance pillars. The role focuses on creating policies, SOPs, training, and monitoring while partnering with pillar leads and the Head of Compliance and AI Governance.

You will engage in risk assessments, maintain evidence for audits, and respond to customer/security questionnaires, all while scaling a growing compliance function in a fast-paced environment.

Qualifications

• Experience in governance, risk, and compliance (GRC) roles.
• Direct experience with security frameworks (SOC 2, ISO 27001, NIST).
• Ability to own complex problems end to end with minimal supervision.

Responsibilities

• Stand up and maintain compliance processes and SOPs across pillars.
• Support security framework compliance posture and audits.
• Own or support day-to-day TPRM operations and vendor risk.
• Respond to customer and partner security questionnaires with SME input.
• Collaborate with pillar leads to fill gaps and drive cross-pillar initiatives.
• Draft and maintain policies, process docs, and training materials.

Skills

GRC experience

Vendor risk management

Policy development

Cross-functional collaboration

Security framework knowledge

Communications writing

Program management

Tools

Vanta or similar platforms

Job description

Reflection AI is seeking a senior Compliance & AI Governance generalist to drive end-to-end programs across governance pillars. The role focuses on creating policies, SOPs, training, and monitoring while partnering with pillar leads and the Head of Compliance and AI Governance.

You will engage in risk assessments, maintain evidence for audits, and respond to customer/security questionnaires, all while scaling a growing compliance function in a fast-paced environment.