Senior GRC Lead: Risk & Compliance

The role

You will lead post-sale transformations and implementations for enterprise customers. You will act as a senior GRC expert to manage relationships with CISOs and VPs of Risk. You will also provide domain expertise to shape product decisions and ensure AI agent accuracy.

What you will do

• Lead implementations for enterprise customers from scoping and configuration to go-live.
• Act as the primary customer-facing GRC expert.
• Communicate with executive stakeholders like CISOs and VPs of Risk.
• Provide expertise in specific risk and compliance domains.
• Translate customer implementation feedback into prioritized points of view for the product team.
• Diagnose and define fixes when agent output falls short of practitioner standards.

Required qualifications

• Bachelor's degree in Information Security, Business, Risk Management, or a related field, or equivalent practical experience.
• 5+ years of hands-on, non-technical experience as an expert in GRC, information security compliance, risk management, or IT audit.
• Direct professional experience applying major compliance or risk frameworks (e.g., SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS) or recognized third-party risk methodologies.
• Proven track record in a customer-facing role driving transformations, implementations, or complex post-sales engagements.
• Strong structured written and verbal communication skills.

Nice to have

• Experience at a Big 4 or Tier 2 advisory firm (risk advisory, internal audit, or cyber practice).
• In-house GRC experience at a company that was regularly audited or assessed.
• Hands-on use of GRC platforms such as Archer, OneTrust, AuditBoard, LogicGate, or ServiceNow IRM.
• Prior customer success, implementation, or consulting experience.

Benefits

• Competitive salary + significant equity
• Flexible PTO
• Medical, dental, and vision insurance
• Meals and snacks in the office
• Relocation and immigration support

About the company

Zania is building agentic AI for Governance, Risk, and Compliance (GRC) to automate and augment complex risk and compliance workflows.