Compliance Manager
Reflection is an AI research lab building open frontier models and a full AI stack for developers, enterprises, and public-sector users.
Funding history
About Reflection
Reflection develops open-weight AI models, open-source software for customizing and running agents, AI-factory infrastructure, and related solutions. Its current research emphasizes large language models, reinforcement learning, and agentic reasoning.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will build and maintain compliance processes across governance, risk, privacy, trade, and contracting areas. You will support security-framework compliance, vendor risk operations, customer questionnaires, audits, policies, training, regulatory tracking, and leadership reporting. You will identify process gaps and create the tools and documentation needed to close them.
Requirements
- 4-7 years of experience in compliance, risk, legal operations, or a related GRC function
- Experience with a security framework such as SOC 2, ISO 27001, or NIST
- Experience with third-party risk management and vendor risk processes
- Ability to own problems end to end with minimal supervision
- Strong written communication and policy and SOP development skills
- Experience working with Legal, Security, Privacy, People, and Engineering stakeholders
- Ability to manage multiple active workstreams
- Exposure to AI governance, data privacy, export controls, or federal contracting compliance
- Experience with GRC or compliance tooling such as Vanta
- Experience supporting customer-facing security questionnaires or enterprise sales and procurement cycles
Responsibilities
- Build and maintain compliance processes and standard operating procedures across compliance pillars
- Maintain security-framework evidence and coordinate audits and assessments
- Support third-party risk management, including vendor questionnaires, risk tiering, onboarding reviews, and remediation tracking
- Respond to customer and partner security and compliance questionnaires
- Partner with compliance pillar leads on cross-functional initiatives and surge work
- Draft and maintain policies, process documentation, and training materials
- Track AI, data, and privacy regulatory developments and translate them into internal workstreams
- Prepare leadership and cross-functional update materials
- Identify process gaps and build trackers, templates, and intake forms
Benefits
- Stock options
- Medical, dental, vision, and life insurance
- Annual wellness allowance
- Daily office lunch and dinner
- 22 weeks of paid parental leave
- Unlimited paid time off in the United States
- 30 vacation days in the United Kingdom
- Visa sponsorship support
- Regular off-sites, happy hours, and team celebrations