Senior Security GRC Leader (Risk & Compliance)

Applied Intuition; Sunnyvale (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Applied Intuition seeks a multifaceted Risk and Compliance Leader to guide our security GRC program across the organization. You will own policy lifecycle, risk register maintenance, and control framework alignment while coordinating with legal, engineering, operations and customers to communicate compliance status.

You will lead enterprise and product risk assessments, drive audit readiness for SOC 2, ISO 27001, and TISAX, and implement a robust third-party risk program with ongoing monitoring

Qualifications

• 6+ years of experience in security GRC, risk management, or compliance program ownership.
• Hands-on experience with enterprise risk assessments and risk register ownership.
• Deep experience managing SOC 2, ISO 27001, and TISAX audits.
• Experience running Third Party Risk Management programs including vendor assessments and monitoring.
• Ability to translate compliance frameworks into practical terms and drive cross-functional remediation.

Responsibilities

• Own and mature the security GRC program, including policy lifecycle management and risk register maintenance.
• Conduct enterprise and product-level risk assessments to identify, prioritize, and track risks.
• Lead and support compliance efforts such as SOC 2, ISO 27001, ISO 9001, and TISAX; manage audits from scoping to remediation.
• Drive Third Party Risk Management (TPRM) including vendor assessments and contract security reviews.
• Build and maintain the GRC infrastructure: risk tracking, tooling, reporting, and executive risk reporting.
• Partner with Legal, Engineering, IT, and Operations to embed compliance in processes and product development.
• Develop and maintain security policies, standards, and procedures aligned to regulatory obligations.
• Support customer-facing security assurance activities including questionnaires and audits.

Skills

GRC

Risk management

Compliance program ownership

Audit readiness

Vendor risk management

Policy development

Tools

Vanta

Drata

OneTrust

Job description

Applied Intuition seeks a multifaceted Risk and Compliance Leader to guide our security GRC program across the organization. You will own policy lifecycle, risk register maintenance, and control framework alignment while coordinating with legal, engineering, operations and customers to communicate compliance status.

You will lead enterprise and product risk assessments, drive audit readiness for SOC 2, ISO 27001, and TISAX, and implement a robust third-party risk program with ongoing monitoring