SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Applied Intuition is a $15 billion Series A AI company (founded 2017) powering physical AI for autonomous systems across automotive, defense, trucking, construction, mining, and agriculture. Eighteen of the top 20 global automakers and the U.S. military rely on their digital infrastructure for autonomy and intelligence.
In this role, you will own day-to-day GRC (Governance, Risk, and Compliance) operations and serve as a hands-on practitioner driving security and compliance across the organization. Key responsibilities include:
• Perform and improve security risk assessments, maintain the risk register, and partner with risk owners to drive remediation and mitigation efforts.
• Own the third-party risk management lifecycle: vendor intake, risk-based tiering, security assessments, due diligence, ongoing monitoring, and remediation. Standardize and automate vendor assessment workflows to improve efficiency and consistency.
• Establish automated control monitoring systems and continuous compliance workflows to maintain real-time audit readiness and strengthen security posture.
• Administer GRC platforms (Vanta, Anecdotes, Drata, OneTrust) with a focus on automation and scalability.
• Support AI governance initiatives aligned with ISO 42001 and NIST AI RMF, translating requirements into practical controls, assessments, and evidence.
• Maintain and update security policies and standards aligned with industry best practices.
Applied Intuition is an in-office company with an expectation that full-time employees work from their office 5 days per week, with flexibility for occasional remote work and schedule adjustments as needed.
REQUIREMENTS:
• Bachelor's or Master's degree in Information Security, Computer Science, Engineering, or related field.
• 5–8 years of experience in security GRC, risk management, or compliance program ownership.
• Active security certification (CISSP, CISA, CISM, AIGP, or ISO 27001 Lead Auditor).
• Proven experience building scalable GRC automations using AI agents, custom tooling, or scripting.
• Strong organizational skills and ability to manage multiple priorities under tight deadlines.
• Strong written and verbal communication skills with technical execution rigor.
• Deep hands-on experience with major security and privacy frameworks: ISO 42001, NIST AI RMF, ISO 27001/17/18, TISAX, SOC 2, or NIST CSF.
NICE TO HAVE:
• Software engineering or technical background building automations for evidence collection, control validation, or audit workflows.
• Experience defining security metrics/KPIs and executive reporting frameworks.
• Experience completing customer security questionnaires and assurance reviews.
• Exposure to automotive security and safety standards (ISO 21434, ISO 26262).
