Latest AI JobsBrowse Jobs
Fireworks AI logo

Senior GRC Specialist

Fireworks AISan MateoEngineering
Apply on company site
Salary
$200K - $220K USD
Job type
Full-time
Posted
23 Sept 2026
Status
Open · checked 7d ago

About this role

Fireworks AI seeks a full-time Senior GRC Specialist to join the security and compliance team in San Mateo. This position suits an experienced security professional ready to manage compliance frameworks and daily GRC operations in a fast-paced environment.

Role Overview

In this position, the professional will mature the organization's compliance program spanning frameworks like SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001, and GDPR. Responsibilities include supporting audits, managing risk, and collaborating with engineering and operations teams to maintain effective controls. The role begins with owning operational tasks such as user access reviews, security awareness programs, and third-party risk management, with clear paths to grow into broader audit and program leadership.

Key Responsibilities

Own day-to-day GRC operations, including user access reviews and certifications, security awareness and phishing or deepfake simulation facilitation, JML tracking, and policy exception triage.
Run the risk management program by performing annual and ad-hoc risk assessments, maintaining the risk register, and tracking remediation issues.
Manage third-party risk through vendor and subprocessor risk assessments, ongoing monitoring, and remediation tracking.
Design and execute internal audits to test control effectiveness, and facilitate external audit cycles by coordinating evidence and control owners.
Administer the GRC platform to ensure continuous control monitoring, automated test health, and year-round audit readiness.
Maintain and update the security policy library to align with operational frameworks.
Partner cross-functionally with engineering, IT, operations, legal, and sales to educate control owners and operationalize compliance.
Translate program data and metrics into actionable insights for leadership.

Requirements

Five to seven years of professional experience in GRC, IT audit, information security, or a closely related field.
Working knowledge of major security and privacy frameworks such as SOC 2, ISO 27001, ISO 27701, ISO 42001, NIST CSF, HIPAA, GDPR, or CCPA.
Experience utilizing GRC platforms like Anecdotes, Vanta, Drata, Secureframe, OneTrust, or ServiceNow GRC.
Experience conducting user access reviews with a solid understanding of identity and access management concepts including RBAC, least privilege, segregation of duties, and JML processes.
Hands-on background administering security awareness or phishing simulation tools such as Adaptive Security, KnowBe4, Hoxhunt, or Proofpoint.
Familiarity with cloud environments like AWS, GCP, or Azure and how SaaS products operate.
Strong written communication skills with the ability to translate technical concepts for diverse audiences.

Skills and Tools

PyTorch
AWS
GCP
Azure
GRC Platforms (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC)
Security Awareness and Phishing Simulation Tools (Adaptive Security, KnowBe4, Hoxhunt, Proofpoint)
Identity and Access Management Concepts

Salary and Benefits

Annual Salary: $200,000 to $220,000 USD per year

About the Company

Fireworks AI is the platform for specialized intelligence that empowers businesses to build, train, and serve AI models tailored to proprietary data, workflows, and products. Founded by the team behind PyTorch and backed by prominent investors like AMD, Benchmark Capital, Index Ventures, Lightspeed, NVIDIA, Sequoia Capital, and TCV, the Series D company is valued at $17.5 billion and powers production AI across text, image, embedding, audio, and multimodal workloads.

How to Apply

Candidates should apply directly on the official company careers page.

Skills and tech stack

PyTorchAWSGCPAzure

Questions candidates ask

What is the salary range for the Senior GRC Specialist?

The annual salary for this full-time role is between $200,000 and $220,000 USD.

Where is this job located?

This position is located in San Mateo, US, and is a full-time, on-site role within the engineering department.

How many years of experience are required?

Candidates must have 5-7 years of experience in GRC, IT audit, information security, or a closely related field.

What compliance frameworks will this role work with?

The specialist will work with frameworks including SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001, GDPR, NIST CSF, and CCPA.

What specific cloud environments should candidates be familiar with?

Candidates should have comfort with cloud environments such as AWS, GCP, or Azure.

Ready to apply?

The application is on the official Fireworks AI careers page.

Apply on company site