Compliance Manager

About the role

Reflection AI is building open AI models and needs a senior generalist to drive compliance across multiple pillars, from AI governance to corporate compliance. You will translate ambiguous regulatory and operational challenges into concrete policies, SOPs, training, and monitoring programs.

Key responsibilities

• Stand up and maintain compliance processes and SOPs across pillars such as insider risk, background checks, external reporting, and vendor tooling.
• Support security framework compliance (SOC 2, ISO 27001, NIST 800-53/800-171, CMMC) by maintaining evidence, coordinating with control owners, and preparing for audits.
• Own or support day‑to‑day TPRM operations: vendor questionnaires, risk tiering, onboarding reviews, and remediation tracking.
• Respond to inbound customer and partner security/compliance questionnaires, collaborating with subject‑matter owners.
• Partner with pillar leads to fill gaps, manage surge work, and keep cross‑pillar initiatives moving.
• Draft and maintain policies, process documentation, and training materials for internal and external audiences.
• Track regulatory developments in AI, data, and privacy and translate them into internal workstreams.

Required profile

• 4‑7 years of experience in compliance, risk, legal operations, or a related GRC function, preferably in tech or a regulated industry.
• Demonstrated ability to own problems end‑to‑end with minimal supervision across unfamiliar subjects.
• Strong written communication skills, turning ambiguous requests into clear policies and SOPs.
• Experience working cross‑functionally with Legal, Security, Privacy, People, and Engineering teams.
• Exposure to AI governance, data privacy (GDPR/CCPA), export controls (ITAR/EAR), or federal contracting compliance (CMMC, FAR/DFARS).

Required skills

• Hands‑on experience with at least one security framework (SOC 2, ISO 27001, NIST).
• TPRM/vendor risk processes: questionnaires, risk tiering, onboarding review.
• GRC or compliance tooling (e.g., Vanta or similar platforms).
• Responding to customer‑facing security questionnaires and supporting enterprise sales/procurement cycles.

What we offer

• Top‑tier compensation with salary and equity.
• Stock options for all contributors.
• Comprehensive health, dental, vision, and life coverage plus annual wellness allowance.
• Daily lunch and dinner provided in the office.
• 22 weeks paid parental leave for all new parents.
• Unlimited paid time off in the U.S. (30 days in the U.K.).
• Visa sponsorship and long‑term immigration support.
• Regular off‑sites, happy hours, and team celebrations.