Director of GRC

About the role

sfcompute is building a liquid market for GPU offtake and needs a senior leader to own Governance, Risk, and Compliance (GRC). As the first GRC hire, you will shape the function from the ground up, ensuring the company meets and exceeds security standards while supporting rapid growth.

Key responsibilities

• Define and execute the GRC strategy, reporting directly to engineering leadership.
• Maintain the existing SOC 2 compliance program and lead the pursuit of ISO 27001 certification.
• Design, implement, and operate new controls, tooling, and audit processes.
• Hire, mentor, and manage a small GRC team as the function scales.
• Interact with auditors and regulators, handling audits personally until the team is fully operational.

Required profile

• Senior GRC or security compliance experience in a startup environment.
• Hands‑on track record of taking a company through its first ISO 27001 certification.
• Proven experience owning or running a SOC 2 compliance program.
• Demonstrated people leadership – hiring, managing, and developing team members.
• Ability to work under resource constraints and build processes from scratch.

Required skills

• SOC 2 compliance
• ISO 27001 certification