GRC Manager

The role

The GRC Manager will own the day-to-day operation of the GRC program. This person will manage audits, risk assessments, and security policies to scale the security and compliance program.

What you will do

• Own the day-to-day operation of Valence's GRC program.
• Maintain and continuously improve Information Security and Artificial Intelligence Management System for ISO 27001/42001.
• Coordinate SOC 2, ISO 27001, ISO 42001, and other certification efforts.
• Manage the security risk register and facilitate enterprise risk assessments.
• Coordinate internal and external audits.
• Manage security policies, standards, and control documentation.
• Track remediation activities and drive control improvements across teams.
• Support customer security questionnaires, RFPs, and due diligence activities.
• Partner with Engineering to ensure technical controls meet compliance requirements.
• Help develop security metrics and executive reporting.

Required qualifications

• Experience managing GRC or security compliance programs.
• A desire to automate GRC tasks, including with the use of AI.
• Strong understanding of security frameworks such as SOC 2, ISO 27001, NIST CSF and ISO 42001.
• Experience with risk management methodologies and maintaining risk registers.
• Experience coordinating internal and external audits.
• Experience working cross-functionally with Engineering, IT, Legal, Privacy and business stakeholders.
• Strong organizational and project management skills.
• Excellent written and verbal communication.
• Comfortable interpreting control requirements and translating them into practical implementation guidance.
• Familiarity with privacy regulations and AI governance, including GDPR and the EU AI Act.
• Have valid travel documents without work authorization restrictions in the US.
• Must be generally available during Eastern Time working hours.

Nice to have

• Familiarity with cloud security concepts and requirements (AWS/Azure preferred)
• Experience with GRC platforms such as Vanta, Drata, Secureframe, OneTrust, Archer or similar is a plus

Benefits

• Competitive salary including base + bonuses
• Comprehensive health coverage (medical, dental, vision) from day one
• Generous PTO
• Company-wide R&R shutdowns
• Paid parental leave
• Retirement plan support for US and global employees
• A WFH stipend
• Phone stipend
• Support to work in a We Work or other space as preferred
• Meaningful ownership in a venture-backed company
• Top-up grants as you scale and deliver exceptional performance

Before you apply

• Must have valid travel documents without work authorization restrictions in the US.
• Employment is contingent upon the successful completion of employment history, education, and other information verification checks.
• Employees may not hold concurrent full-time employment with another organization.
• Any outside consulting, advisory, freelance, or other professional work must be disclosed and approved in advance.
• Identity, LinkedIn profiles, employment history, and references are verified.

About the company

Valence is an AI native coaching platform for enterprise that offers personalized, expert, and human-like guidance to leaders or employees. The company builds AI-powered personalization to transform how large companies approach learning and development.