Senior GRC Specialist: SOC 2, ISO 27001, FedRAMP

Blitzy; Kendall Square (MA); In loco; USD 160.000 - 240.000; Tempo pieno

Descrizione del lavoro

Blitzy, a Cambridge, MA based AI software platform, seeks a Staff GRC Specialist to own and execute our SOC 2 II and ISO 27001 programs, operate Vanta as the system of record, and collaborate with auditors and internal teams.

You will lead evidence collection, drive process design, and advance FedRAMP efforts, shaping Blitzy's governance vision while reducing the load on other teammates.

Competenze

• 10+ years of experience in compliance assurance, controls and technology risk management.
• Bachelor’s in information systems, computer science or related field.
• Hands-on ownership of a full SOC 2 II or ISO 27001 audit cycle.
• Experience running an automated GRC platform (Vanta or equivalent).
• Ability to manage multiple initiatives and auditor/vendor relationships.

Mansioni

• Lead SOC 2 Type II and ISO 27001:2022 readiness end-to-end.
• Manage auditor and partner relationships, report findings to management.
• Own automated GRC platform as system of record; close gaps proactively.
• Design and build new compliance processes and FedRAMP efforts.
• Evaluate evidence critically and reduce stakeholder interrupt load.
• Define governance vision aligned with Blitzy priorities.
• Support and drive wider GRC responsibilities including third‑party risk.
• Mentor teammates and set working standards for others.

Conoscenze

Compliance governance

SOC 2 Type II

ISO 27001

Auditing experience

Vendor risk management

Stakeholder management

Policy writing

Mentoring teammates

Risk management

Automation in GRC

Formazione

Bachelor’s in information systems or computer science

Strumenti

Vanta

Descrizione del lavoro

Blitzy, a Cambridge, MA based AI software platform, seeks a Staff GRC Specialist to own and execute our SOC 2 II and ISO 27001 programs, operate Vanta as the system of record, and collaborate with auditors and internal teams.

You will lead evidence collection, drive process design, and advance FedRAMP efforts, shaping Blitzy's governance vision while reducing the load on other teammates.