Hq - Grc Lead

We are looking for a GRC Lead to own and scale our Governance, Risk, and Compliance function within a fast-growing product company. This is a key role responsible for ensuring compliance with SOX, ISO **, and GDPR, while enabling the business to move fast in a secure and controlled way.You will act as the main driver of our compliance strategy, working cross-functionally with Engineering, Security, Legal, Finance, and Product teams.What you will doOwn and lead the company’s GRC strategy across SOX, ISO **, and GDPRDesign, implement, and maintain SOX control frameworks, including documentation, testing, and audit readinessBuild and manage the Information Security Management System (ISMS) aligned with ISO **Ensure GDPR compliance across all data processing activities, including data mapping, DPIAs, and privacy controlsLead internal and external audits, acting as the primary point of contact for auditorsIdentify compliance gaps and drive remediation plans with technical and non-technical teamsDevelop governance policies, procedures, and risk management frameworksPartner closely with Engineering and Security teams to embed controls into systems and SDLC processesMonitor regulatory and compliance changes and translate them into actionable requirementsRequirements8+ years of experience in GRC, Risk, Compliance, or IT Audit rolesStrong hands-on experience with SOX compliance programs (design, testing, audit coordination)Solid knowledge of ISO ** and experience managing or supporting ISMS implementationPractical experience with GDPR in a product or corporate environmentExperience working with internal and external auditorsStrong stakeholder management and communication skills across technical and non-technical teamsAbility to translate regulatory requirements into scalable business processesFluent EnglishNice to haveExperience in SaaS or product-led companiesExperience in Big 4 (Deloitte, EY, PwC, KPMG) or similar audit environmentsFamiliarity with cloud environments (AWS, GCP, Azure)Security certifications (CISA, CISM, ISO ***** Lead Implementer/Auditor)#LI-ML3We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

8+ years of experience in GRC, Risk, Compliance, or IT Audit roles Strong hands-on experience with SOX compliance programs (design, testing, audit coordination) Solid knowledge of ISO *** and experience managing or supporting ISMS implementation Practical experience with GDPR in a product or corporate environment Experience working with internal and external auditors Strong stakeholder management and communication skills across technical and non-technical teams Ability to translate regulatory requirements into scalable business processes Fluent English Nice to have Experience in SaaS or product-led companies Experience in Big 4 (Deloitte, EY, PwC, KPMG) or similar audit environments Familiarity with cloud environments (AWS, GCP, Azure) Security certifications (CISA, CISM, ISO *** Lead Implementer/Auditor)