SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 225,000 - 350,000 / annual
Thinking Machines Lab is seeking a Governance, Risk and Compliance Lead to own the company's certification roadmap and day-to-day compliance operations. The role involves personally driving SOC 2, ISO 27001, FedRAMP, and other certifications from scoping through audit close, including evidence collection, control documentation, and direct auditor engagement.
Key responsibilities include managing recurring compliance processes (control testing, audit prep, risk register maintenance, policy attestations), answering compliance and risk questions from engineering, security, and product teams with technical fluency, tracking regulatory requirements relevant to AI companies (GDPR, EU AI Act), identifying compliance gaps as the company scales, and building tooling and documentation to improve audit efficiency. The role also requires planning a multi-quarter roadmap for the GRC function while maintaining hands-on execution of current certifications.
The ideal candidate has 7+ years of experience across technology and cybersecurity GRC with demonstrated breadth in governance, risk, and compliance. Required experience includes leading SOC 2, ISO 27001, FedRAMP or comparable certifications end-to-end, hands-on audit evidence collection and control documentation, managing recurring compliance processes, and the ability to quickly learn technical domains and translate them for stakeholders.
Preferred qualifications include a software engineering or technical background applied to GRC (evidenced by custom scripts, tools, or automations), experience translating compliance requirements into scalable automation using AI agents, and demonstrated experience growing GRC function capabilities as a company scales. The role is based in San Francisco and offers competitive compensation, visa sponsorship, health/dental/vision benefits, unlimited PTO, paid parental leave, and relocation support.
