# Senior GRC Lead

**Company:** [Jasper](https://hotfix.jobs/companies/jasper)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $174k – $205k/yr
**Experience:** 8+ years
**Skills:** Governance, Risk & Compliance, Soc 2 Type Ii, ISO 27001, Nist Csf, GDPR, GCP, Ai Governance, Vanta, Drata, Onetrust, Python, RAG, Vendor Risk Management
**Posted:** 2026-08-25

> Own and scale Jasper’s governance, risk, and compliance program for AI-native SaaS products, leading audits, risk and vendor programs, policy management, and AI governance. The role requires 8+ years of GRC experience, expertise in major security frameworks, cloud and AI fluency, and strong cross-functional communication.

## Job Description

## Responsibilities
- Own Jasper’s governance, risk, and compliance program end-to-end.
- Drive SOC 2, ISO 27001, and similar compliance audits from readiness through certification, with a path toward ISO 42001.
- Support GDPR and broader privacy compliance alongside Legal.
- Rationalize requirements across frameworks and maintain a single source of truth for control ownership.
- Serve as the subject-matter expert on control mapping for audits, RFPs, and enterprise sales engagements.
- Respond to customer security questionnaires and support sales and legal due diligence.
- Maintain the risk register, including risk identification, scoring, and remediation tracking.
- Manage vendor and third-party risk assessments and the vendor security review process.
- Own security and compliance policy management.
- Partner with Security, Legal, Product, Engineering, GTM, and People to embed governance requirements into company operations.
- Automate compliance workflows, audit artifact collection, internal reviews, and continuous monitoring.
- Drive and improve AI governance across the company and product.

## Requirements
- 8+ years of experience in Governance, Risk & Compliance, ideally at a SaaS company.
- Working knowledge of AI concepts including LLMs, agents, copilots, tokens, credits, context windows, RAG, and data governance.
- Deep expertise in multiple compliance and security frameworks, including SOC 2 Type II, ISO 27001, and NIST CSF.
- Experience with at least one regulatory framework such as GDPR, CCPA, or HIPAA.
- Knowledge of modern cloud-native web application development and security practices, particularly GCP and frontier AI platforms.
- Experience with GRC tools such as Vanta, Drata, OneTrust, or similar.
- Experience managing risk registers and vendor risk programs.
- Strong cross-functional communication skills and the ability to translate technical issues for non-technical teams.
- Experience using AI agents, tools, and platforms to automate workflows responsibly.
- Experience at a startup or fast-growing SaaS company.
- CISA, CISSP, CRISC, or similar certification.
- Experience scoping or pursuing ISO 42001 or other AI governance frameworks.
- Hands-on experience with agentic coding tools such as Cursor, Claude Code, or Copilot.
- Working knowledge of Python sufficient to modify and run scripts, build automations, and ship small tools.

## Compensation & Benefits
- Base salary: **$174,250–$205,000 USD**.
- Comprehensive health, dental, and vision coverage beginning on the first day for employees and their families.
- 401(k) program with up to 2% company matching.
- Equity grant participation.
- Flexible PTO with a $900 annual FlexExperience budget.
- $1,800 annual FlexWellness budget.
- $1,500 home office setup budget.
- Annual learning and development stipend.
- 16 weeks of paid parental leave.

## Similar jobs

- [Senior Security Engineer](https://hotfix.jobs/jobs/b4bd3a90-c9c6-4983-b371-da5d17567c3a) - Jasper - Remote - $174k – $205k/yr
- [Compliance Engineer - Public Sector](https://hotfix.jobs/jobs/1664a48a-e3c2-4c6a-91dd-ffcd986273e3) - Wiz - Remote - $174k – $238k/yr
- [Senior Application Security Engineer](https://hotfix.jobs/jobs/50407c37-394b-474e-b261-b30218d87d23) - Starburst - Boston, MA - $175k – $215k/yr
- [Senior Security Engineer, Incident Response](https://hotfix.jobs/jobs/e3eb314c-9387-43d9-ac19-4e000eebb406) - Snowflake - Remote - $176k – $253k/yr
- [Senior Security Engineer, AI Incident Response](https://hotfix.jobs/jobs/78fd3868-4f71-43b6-9cd6-de438376e06d) - Snowflake - Menlo Park, CA - $176k – $253k/yr

**Apply:** https://hotfix.jobs/jobs/184bbd0f-e014-4dbb-ad67-9e995b7c12bc
**Canonical:** https://hotfix.jobs/jobs/184bbd0f-e014-4dbb-ad67-9e995b7c12bc