VP of GRC

The role

You will build and lead Zania's customer-facing GRC organization. You will serve as an executive advisor to large customers and partner with product and engineering to improve agent capabilities.

What you will do

• Build the GRC organization by hiring, coaching, and scaling a team.
• Lead GRC engagements from scoping and onboarding through audit readiness.
• Serve as a trusted advisor to CISOs, CROs, and Chief Audit Executives.
• Design repeatable delivery methodologies across various frameworks.
• Partner with product and AI engineering to turn field insight into agent capabilities.
• Lead GRC discovery, solution design, and proof-of-value work with the sales team.
• Define and report on metrics like time to audit readiness and customer satisfaction.

Required qualifications

• Bachelor's degree in Information Security, Accounting, Business, or a related field, or equivalent practical experience.
• 12+ years of experience in GRC, IT audit, or security compliance.
• 5+ years leading customer-facing GRC, audit, or advisory teams.
• Hands-on expertise with SOC 2, ISO 27001, NIST, and third-party risk management.
• Strong structured written and verbal communication skills.

Nice to have

• Experience at a Big 4 or advisory firm, or at a GRC platform company.
• Certifications such as CISA, CISSP, CRISC, CISM, or ISO 27001 Lead Auditor.
• Familiarity with AI governance frameworks (ISO 42001, NIST AI RMF, EU AI Act).
• Experience as an early leader at a high-growth startup.

Benefits

• Competitive salary + significant equity
• Flexible PTO
• Medical, dental, and vision insurance
• Meals and snacks in the office
• Relocation and immigration support

About the company

Zania is building agentic AI for Governance, Risk, and Compliance (GRC) to automate and augment complex risk and compliance workflows.