Blitzy

Head of GRC (Governance, Risk, & Compliance)

Cambridge, MA

Sponsorship not specified$220k-$260kDetected 6 days ago

ComplianceCommunication

About the role

To be clear about scope, this role is not:
A paperwork-only compliance role with no rigor.
A job where you escalate every auditor question to engineering or to the Security Delegate.

We move quickly and decisively to innovate internally and deliver exceptional software externally.
As Head of GRC, you'll own a compliance program that's audit-ready by design, not by scramble.
You own Vanta (or an equivalent GRC platform) as the single source of truth, not a reference tool.
You manage auditors and compliance partners directly, without needing anyone to run interference for you.
Own Vanta (or equivalent) as the system of record - configuring tests and keeping evidence current, not just checking a dashboard.
Manage auditor and partner relationships directly, including firms like Insight Assurance and FedRAMP platform partners such as Second Front Systems/Game Warden - without routing every conversation through the Security Delegate.
Build the compliance processes that don't exist yet, starting with a formal sub-processor change communication process, which is already coming up as a contractual requirement in enterprise deals.
Run SOC 2 Type II and ISO 27001:2022 compliance building continuously toward what auditors actually sample, rather than scrambling before the audit window opens.
A track record of building a compliance process from scratch, not just running an existing playbook.

Direct experience running a GRC/compliance platform (Vanta or equivalent) as the system-of-record owner.
A track record of managing vendor and auditor relationships independently, without hand-holding.
Experience managing multiple frameworks concurrently - SOC 2, ISO 27001, and GDPR at the same time.
Familiarity with Google Workspace as an identity provider.
Required Experience

Led by two pioneering co-founders we are one of the fastest growing companies in the U.S., creating our own category of enterprise autonomous software development.
We automate thousands of hours of software development for our customers, which includes strong representation within the Fortune 500.
How we work:
We move Blitzy Fast: Time is both our company's and our clients' most precious asset.
Championship Mindset: We operate like a professional sports team.
We win as a team by holding ourselves and each other to high standards, collaborating in-person, and remaining focused on the mission.
Passion for Invention: We're pushing the frontier of what's possible, requiring constant innovation and iteration.
We Work for the Customer: We focus on delivering outsized value to the customers we work with and expanding those relationships into deep, meaningful partnerships.
We believe in being 'everyday athletes'-taking care of ourselves so we can bring our best minds to work.
We promote great sleep, movement, and restorative activities for optimal mental performance.
It makes for a happier and more productive team.
Blitzy is an equal opportunity employer committed to building a diverse and inclusive team.
We believe different perspectives make us stronger.

This listing is sourced directly from Blitzy's careers page and normalized into a canonical job model.