Senior GRC Specialist: Audit, Risk & Compliance Leader

Fireworks AI; United States; On-site; USD 110,000 - 150,000; Full time

Job summary

Fireworks AI is seeking a GRC Specialist to join our security and compliance team in the United States. You will own day-to-day GRC operations, risk assessments, third-party risk programs, and internal audits, collaborating with engineering, IT, and legal teams to keep controls effective as we scale.

You’ll drive continuous control monitoring, policy updates, and audit readiness, growing into broader leadership over time.

Qualifications

• 5+ years in GRC, IT audit, security, or related field.

Responsibilities

• Own day-to-day GRC operations including user access reviews, security awareness, JCML tracking, and policy control management.
• Run the risk management program with annual/ad-hoc assessments and risk register maintenance.
• Manage third-party risk through vendor and subprocessor assessments and remediation tracking.
• Design and execute targeted internal audits to test control effectiveness and support external audits.
• Oversee continuous control monitoring and evidence automation within the GRC platform.
• Foster cross-functional relationships with engineering, IT, operations, legal, and sales.
• Educate control owners on their responsibilities and prepare them for audits.
• Keep the policy library current and aligned to applicable frameworks.
• Turn program data into actionable insights and leadership reports.

Skills

GRC experience

SOC2

ISO 27001

NIST CSF

HIPAA

GDPR/CCPA

GRC platforms

IAM concepts

Security awareness

Cloud familiarity

Tools

Anecdotes

Vanta

Drata

Secureframe

OneTrust

ServiceNow GRC

Job description

Fireworks AI is seeking a GRC Specialist to join our security and compliance team in the United States. You will own day-to-day GRC operations, risk assessments, third-party risk programs, and internal audits, collaborating with engineering, IT, and legal teams to keep controls effective as we scale.

You’ll drive continuous control monitoring, policy updates, and audit readiness, growing into broader leadership over time.