Senior GRC Lead - AI-Driven Security & Compliance

Gusto; San Francisco (CA); Hybrid; USD 183,000 - 205,000; Full time

Benefits offered by this job

Equity (RSUs)

Competitive pay & benefits

Hybrid work schedule (2–3 days in-odd)

Job summary

Gusto is seeking a Security, Governance, Risk & Compliance professional to advance governance, risk, and compliance initiatives across the company. You will guide maturity from foundational to steady-state operations while embedding security-minded practices.

The role collaborates with Legal, IT, Engineering, and Sales, leveraging AI to automate controls and evidence collection, and ensuring SOC 2 Type 2 compliance and ITGC alignment.

Qualifications

• 8+ years of governance, risk, and compliance experience in SaaS.
• Bachelor’s degree in Business, Information Systems, or related field.
• Experience leading SOC 2 Type 2 initiatives with cross-functional teams.

Responsibilities

• Develop and maintain security and compliance SOPs and policies.
• Manage trust platforms: controls, risks, vendors, exceptions; implement AI for controls evidence.

Skills

Governance

Risk management

Compliance

SOC 2 Type 2

Data governance

AI enablement

Education

CISA certification

CRISC

GRCP

CGEIT

CRMA

PMI-RMP

Tools

Optro

Vanta

Drata

Viso Trust

Job description

Gusto is seeking a Security, Governance, Risk & Compliance professional to advance governance, risk, and compliance initiatives across the company. You will guide maturity from foundational to steady-state operations while embedding security-minded practices.

The role collaborates with Legal, IT, Engineering, and Sales, leveraging AI to automate controls and evidence collection, and ensuring SOC 2 Type 2 compliance and ITGC alignment.