SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Applied Intuition is a $15B Silicon Valley company (founded 2017) powering physical AI infrastructure for autonomous systems across automotive, defense, trucking, construction, mining, and agriculture. Eighteen of the top 20 global automakers and the US military trust their solutions.
In this role, you will own day-to-day GRC (Governance, Risk, and Compliance) operations and serve as a key architect of the company's security and compliance posture. Your responsibilities include:
• Perform and continuously improve security risk assessments, maintain the risk register, and partner with risk owners to drive remediation and mitigation efforts.
• Own the third-party risk management lifecycle end-to-end: vendor intake, risk-based tiering, security assessments, due diligence, ongoing monitoring, and remediation. Standardize and automate vendor assessment workflows to improve efficiency and consistency.
• Establish automated control monitoring systems and continuous compliance workflows to maintain real-time audit readiness. Work with control owners to strengthen security posture.
• Administer GRC platforms (Vanta, Anecdotes, Drata, OneTrust) with emphasis on automation and scalability.
• Develop deep expertise in major security and privacy frameworks: ISO 42001, NIST AI RMF, ISO 27001/17/18, TISAX, SOC 2, and NIST CSF.
• Support AI governance initiatives aligned with ISO 42001 and NIST AI RMF, translating requirements into practical controls, assessments, and evidence.
• Maintain and update security policies and standards aligned with industry best practices.
Applied Intuition is an in-office company with an expectation that full-time employees work from their office 5 days per week, though occasional flexibility is available for morning remote work or schedule adjustments.
REQUIREMENTS:
• Bachelor's or Master's degree in Information Security, Computer Science, Engineering, or related field.
• 5–8 years of experience in security GRC, risk management, or compliance program ownership.
• Active security certification required (CISSP, CISA, CISM, AIGP, or ISO 27001 Lead Auditor).
• Proven experience building scalable GRC automations using AI agents, custom tooling, or scripting.
• Strong organizational skills and ability to manage multiple priorities under tight deadlines.
• Strong written and verbal communication skills with technical execution rigor.
NICE TO HAVE:
• Software engineering or technical background building automations for evidence collection, control validation, or audit workflows.
• Experience defining security metrics/KPIs and executive reporting frameworks.
• Experience completing customer security questionnaires and assurance reviews.
• Exposure to automotive security and safety standards (ISO 21434, ISO 26262).
