Senior GRC Lead for AI – End-to-End Certifications & Audits

Thinking Machines Lab; San Francisco (CA); On-site; USD 225,000 - 350,000; Full time

Benefits offered by this job

Health, dental, and vision benefits

Unlimited PTO

Parental leave

Relocation support

Job summary

Thinking Machines Lab is seeking a GRC Lead to drive certifications (SOC 2, ISO 27001, FedRAMP) from scoping to audit close. You will collaborate with security, legal, safety, and engineering to answer risk questions, manage audits, and shape the GRC roadmap for the coming year.

You will build evidence, write controls, and maintain the processes and tooling needed for efficient audits, while translating complex compliance demands into practical, scalable solutions.

Qualifications

• 7+ years of experience across technology and cybersecurity GRC with breadth across disciplines.
• Experience leading SOC 2, ISO 27001, FedRAMP or comparable certifications from scoping to audit close.
• Hands-on experience collecting audit evidence and writing control documentation.
• Experience managing recurring compliance processes such as control testing, risk register maintenance, or policy attestations.
• Ability translating complex technical concepts for non-technical stakeholders.

Responsibilities

• Own certification roadmap end to end: scope certifications, build controls, collect evidence, and represent to auditors through to close.
• Manage recurring compliance processes on a set cadence: control testing, audit prep/response, risk registry maintenance, policy attestations.
• Answer compliance and risk questions from engineering, security and product teams with technical fluency across infrastructure, model deployment, and data handling.
• Track GDPR, GDPR-like requirements and translate into actionable controls.
• Identify gaps in coverage as products/infrastructure/regulators change, propose changes before blockers.
• Build and maintain tooling/documentation to accelerate future audits.
• Plan multi-quarter GRC roadmap while personally running current certifications and audits.

Skills

GRC knowledge

SOC 2 / ISO27001 leadership

Audit evidence collection

Policy attestations

Technical to non-technical translation

Tools

Automation scripts

Audit tooling

Job description

Thinking Machines Lab is seeking a GRC Lead to drive certifications (SOC 2, ISO 27001, FedRAMP) from scoping to audit close. You will collaborate with security, legal, safety, and engineering to answer risk questions, manage audits, and shape the GRC roadmap for the coming year.

You will build evidence, write controls, and maintain the processes and tooling needed for efficient audits, while translating complex compliance demands into practical, scalable solutions.