Employer description & source details
Emergent is scaling a global B2C product used across 190+ countries. We’re looking for a GRC Lead to build and run our compliance program across security, privacy, AI, and consumer protection. Certifications & Audits: Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal. Privacy & Data Compliance: Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing. AI Governance: Define controls for emerging AI regulations, including the EU AI Act, and their application to autonomous code generation and execution. GRC Program: Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness. Engineering Partnership: Translate compliance requirements into practical, scalable controls that engineering teams can actually implement. 5 to 7+ years in GRC, security compliance, privacy, or risk Hands-on experience with SOC 2 / ISO 27001 Strong understanding of GDPR and global privacy Experience managing audits, vendors, controls, and compliance programs end to end Ability to work closely with Engineering, Security, Product, and Legal teams Experience with AI governance, EU AI Act, or cloud-native products Comfortable building GRC programs from the ground up Prefer practical, scalable controls over paperwork Build governance for AI systems that build software Operate at global scale across 190+ countries Work directly with founders and core engineering, security, and product teams Solve emerging challenges at the intersection of AI, security, privacy, and regulation
Extracted skills: security