Senior GRC Lead - AI Governance & Compliance (Remote)

Jasper, Inc.; Northern (KY); Hybrid; USD 174,000 - 205,000; Full time

Benefits offered by this job

Health, dental & vision coverage

401(k) with company match

Equity grant participation

Flexible PTO with learning budget

Job summary

Jasper, Inc. is seeking a Senior GRC Lead to own Governance, Risk, and Compliance for our AI-native marketing platform. You will drive audits, risk management, and vendor security in partnership with Security, Legal, and Engineering to keep Jasper compliant as we scale.

You will work cross-functionally to embed compliance in product and operations, serving as the SME on control mapping during audits, RFPs, and enterprise engagements, ensuring trust and competitive advantage.

Qualifications

• 8+ years in Governance, Risk & Compliance, ideally at a SaaS company.
• Deep expertise across multiple frameworks: SOC 2 Type II, ISO 27001, NIST CSF, GDPR/CCPA/HIPAA or equivalent.
• Experience with cloud-native web apps and security best practices (GCP, frontier AI).
• Experience managing risk registers and vendor risk programs.
• Strong cross-functional communication with Security, Legal, Product, Engineering.

Responsibilities

• Own compliance audits (SOC 2, ISO 27001) from readiness to certification.
• Collaborate with Legal on GDPR/privacy compliance.
• Maintain risk register with identification, scoring, and remediation.
• Manage vendor risk assessments and vendor security reviews.
• Draft, review, and update security/compliance policies.
• Embed compliance requirements across the company and product.

Skills

AI governance

GRC leadership

Audits (SOC 2, ISO 27001)

Regulatory compliance

Cloud security

GRC tooling (Vanta, Drata, OneTrust)

Risk management

Vendor risk

Cross-functional communication

AI governance frameworks (ISO 42001)

Python scripting

Education

CISA, CISSP, CRISC or similar certification

Tools

Vanta

Drata

OneTrust

Job description

Jasper, Inc. is seeking a Senior GRC Lead to own Governance, Risk, and Compliance for our AI-native marketing platform. You will drive audits, risk management, and vendor security in partnership with Security, Legal, and Engineering to keep Jasper compliant as we scale.

You will work cross-functionally to embed compliance in product and operations, serving as the SME on control mapping during audits, RFPs, and enterprise engagements, ensuring trust and competitive advantage.