SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Fireworks is a Series D AI infrastructure company (valued at $17.5B, backed by NVIDIA, Sequoia, Benchmark, and others) building a platform for specialized intelligence that enables companies to build, train, and serve AI models tailored to their data and workflows.
You'll join the security and compliance team as a Senior GRC Specialist, owning day-to-day governance, risk, and compliance operations across SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001, and GDPR frameworks. This role combines operational execution with strategic program maturity work.
Key responsibilities include: managing user access reviews and certifications; running the risk management program (annual assessments, risk register, remediation tracking); conducting third-party vendor and subprocessor risk assessments with ongoing monitoring; designing and executing internal audits to test control effectiveness; administering the GRC platform to maintain continuous control monitoring and evidence automation; building cross-functional relationships with engineering, IT, operations, legal, and sales teams; educating control owners on their responsibilities; maintaining the policy library; and translating program data into actionable insights for leadership.
You'll have clear growth into end-to-end audit leadership, program and control maturity initiatives, and mentoring newer team members as the program scales.
Required: 5–7 years in GRC, IT audit, information security, or related field; working knowledge of SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR, or CCPA; hands-on experience with GRC platforms (Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC, or similar); user access review and IAM expertise (RBAC, least privilege, segregation of duties, JML); experience administering security awareness or phishing simulation platforms (Adaptive Security, KnowBe4, Hoxhunt, Proofpoint); comfort with cloud environments (AWS, GCP, Azure) and SaaS architecture; strong written communication; detail-oriented and organized; collaborative mindset.
