Risk and Compliance Lead

About the role

We are looking for a multifaceted Risk and Compliance Lead to drive security compliance initiatives across Applied Intuition. You will ensure robust security controls, identify and mitigate risks, and collaborate with legal, engineering, operations and customers to communicate compliance status.

Key responsibilities

• Own and mature the security GRC program, including policy lifecycle management, risk register maintenance, and control framework alignment.
• Conduct enterprise and product‑level risk assessments, prioritize risks against the company’s risk appetite, and translate findings into remediation plans.
• Lead and support compliance efforts such as SOC 2, ISO 27001, ISO 9001, TISAX, and federal/defense requirements, managing audit readiness and evidence collection.
• Drive the Third‑Party Risk Management program, performing vendor assessments, contract security reviews, and ongoing monitoring of critical suppliers.
• Build and maintain GRC infrastructure, including risk tracking tools, reporting cadences, and executive‑level risk reporting.
• Partner with Legal, Engineering, IT, and Operations to embed compliance and risk requirements into business processes, product development, and infrastructure decisions.
• Develop and maintain practical, enforceable security policies, standards, and procedures.

Required profile

• Proven experience leading security compliance and GRC initiatives in a technology‑focused organization.
• Strong ability to assess, prioritize and remediate enterprise‑wide risks.
• Experience coordinating audits and managing evidence for standards such as SOC 2, ISO 27001, ISO 9001, and TISAX.
• Demonstrated skill in managing third‑party risk programs and vendor security reviews.
• Excellent collaboration with cross‑functional teams including legal, engineering, and operations.

Required skills

• SOC 2 compliance
• ISO 27001
• ISO 9001
• TISAX
• GRC program management
• Enterprise risk assessment
• Third‑party risk management

What we offer

• In‑office work environment with flexibility for occasional remote work.
• Opportunity to shape security governance at a fast‑growing AI‑driven company.