Governance, Risk, and Compliance Manager

About the role

TensorWave is looking for its first dedicated Governance, Risk & Compliance (GRC) Manager to own the end‑to‑end GRC framework. As a senior individual contributor, you will turn security into a competitive advantage, enabling faster sales cycles and preparing the company for future regulatory and liquidity events.

Key responsibilities

• Design, implement, and continuously test a unified controls framework, including IT General Controls (ITGCs) across a growing regulatory landscape.
• Maintain and mature SOC 2 Type II and ISO 27001 certifications, moving toward automated, continuous evidence collection.
• Develop a SOX roadmap, delivering gap analysis and remediation for internal controls over financial reporting (ICFR) aligned to AICPA/PCAOB standards.
• Establish an automated, enterprise‑grade third‑party risk program for a complex SaaS ecosystem.
• Run formal internal risk assessments, maintain a corporate risk register, and present quarterly to leadership.
• Build and maintain a centralized Trust Center to streamline security questionnaire responses.
• Partner with engineering to embed compliance early in the development lifecycle.
• Maintain an optimized policy suite that meets legal and security requirements while minimizing overhead.

Required profile

• 5–8+ years of experience in Information Security, IT Audit, or GRC.
• Hands‑on experience designing, implementing, and defending controls for SOC 2 Type II, ISO 27001, SOX, and/or PCI DSS.
• Strong knowledge of Sarbanes‑Oxley compliance and evidence preparation to AICPA or PCAOB standards.
• Proven track record in fast‑paced Series B/C startups and mature enterprise or Big 4 audit environments.

Required skills

• SOC 2 Type II
• ISO 27001
• SOX
• PCI DSS
• AICPA
• PCAOB
• IT General Controls (ITGCs)