Compliance Manager

The role

A senior generalist will build policies, controls, and operating rhythms across six compliance pillars. You will turn ambiguous problems into working programs including policies, SOPs, training, and monitoring.

What you will do

• Stand up and maintain compliance processes and SOPs across pillars
• Support security framework compliance posture by maintaining evidence and coordinating audits
• Own or support day-to-day TPRM operations
• Respond to inbound customer and partner security/compliance questionnaires
• Partner with pillar leads to fill gaps and cover surge work
• Draft and maintain policies, process documentation, and training materials
• Track regulatory developments and translate them into internal workstreams
• Prepare materials for leadership and cross-functional updates
• Identify process gaps and build trackers, templates, and intake forms

Required qualifications

• 4-7 years in compliance, risk, legal operations, or a related GRC function
• Direct experience with at least one security framework (SOC 2, ISO 27001, NIST)
• Direct experience with TPRM/vendor risk processes
• Ability to own a problem end to end with minimal supervision
• Strong written communication
• Experience working cross-functionally with Legal, Security, Privacy, People, and Engineering stakeholders
• Comfortable context-switching across multiple active workstreams

Nice to have

• Ideally in tech or a regulated industry
• Exposure to AI governance, data privacy (GDPR/CCPA), export controls (ITAR/EAR), or federal contracting compliance (CMMC, FAR/DFARS)
• Experience with GRC or compliance tooling (e.g., Vanta or similar platforms)
• Experience responding to customer-facing security questionnaires or supporting enterprise sales/procurement cycles
• Prior experience in a high-growth or startup environment

Benefits

• Salary and equity
• Stock options
• Comprehensive medical, dental, vision, and life
• Annual wellness allowance
• Lunch and dinner provided in the office daily
• 22 weeks paid parental leave for all new birthing and non-birthing parents
• Unlimited paid time off in the U.S.
• 30 days paid time off in the U.K.
• Visa sponsorship support
• Regular off-sites, happy hours, and team celebrations

Before you apply

• This position may require access to technology or source code subject to the U.S. Export Administration Regulations
• Offer of employment may be conditioned on the Company's ability to provide access to technology or source code in compliance with U.S. export control laws

About the company

Reflection is a research lab making intelligence open and accessible for everyone to use, customize, and build on. They build open models to help shape the future of AI.