Governance Risk and Compliance Lead
Artificial-intelligence research and product company building customizable AI systems, including the Tinker training API and Inkling open-weight models.
Funding history
About Thinking Machines Lab
Thinking Machines Lab develops AI products that let researchers and developers fine-tune and use models, while also releasing open-weight multimodal models.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead certification efforts from scoping through audit close, collect evidence, write control documentation, and represent the organization directly to auditors. You will manage recurring compliance processes, assess risks, translate regulatory requirements into controls, maintain audit tooling and documentation, and develop the GRC roadmap.
Requirements
- 7+ years of related experience in technology and cybersecurity governance, risk, and compliance
- Experience leading a SOC 2, ISO 27001, FedRAMP, or comparable certification through audit close
- Hands-on experience collecting audit evidence and writing control documentation
- Experience managing recurring compliance processes
- Experience learning technical domains and translating them for non-technical stakeholders
Responsibilities
- Own the certification roadmap from scoping through audit close
- Build control sets and collect and organize audit evidence
- Represent the organization directly to auditors
- Manage control testing, audit preparation and response, risk register maintenance, and policy attestations
- Answer compliance and risk questions from engineering, security, and product stakeholders
- Track regulatory and framework requirements and translate them into actionable controls
- Identify compliance gaps and propose changes
- Build and maintain audit tooling and documentation
- Plan a multi-quarter roadmap for the GRC function
Benefits
- Health, dental, and vision benefits
- Unlimited PTO
- Paid parental leave
- Relocation support
