← All roles

Risk and Compliance Lead

Applied Intuition
Apply on company site
Sunnyvale, CA$160k - $190kfull-timePosted 7mo ago

About the role

Risk and Compliance Lead responsible for governing security GRC programs, risk assessments, and compliance efforts (SOC2, ISO 27001, ISO 9001, TISAX, and defense requirements) across Applied Intuition. Partners with Legal, Engineering, IT, and Operations to embed compliance into business processes and product development; supports customer security assurance activities.

Responsibilities

  • Own and mature the security GRC program, including policy lifecycle management, risk register maintenance, and control framework alignment across the organization
  • Conduct comprehensive enterprise and product-level risk assessments to identify, prioritize, and track risks against the company's risk appetite - translating findings into actionable remediation plans for stakeholders
  • Lead, manage and support compliance efforts such as, but not limited to, SOC2, ISO 27001, ISO 9001, TISAX, and federal/defense requirements - owning audit readiness, evidence collection, and remediation tracking end to end
  • Drive Third Party Risk Management (TPRM) program, including vendor assessments, contract security reviews, and ongoing monitoring of critical third parties
  • Build and maintain the GRC program infrastructure - including risk tracking, compliance tooling, reporting cadences, and executive-level risk reporting
  • Partner with Legal, Engineering, IT, and Operations to embed compliance and risk requirements into business processes, product development, and infrastructure decisions
  • Develop and maintain security policies, standards, and procedures that are practical, enforceable, and aligned to regulatory and contractual obligations
  • Support customer-facing security assurance activities including questionnaires, audits, and contractual security reviews

Qualifications

  • 6+ years of experience in security GRC, risk management, or compliance program ownership - with a track record of building or maturing programs, not just executing within them
  • Hands on experience in running Enterprise Risk Assessments aligned with industry standard frameworks, risk register ownership, and translating technical risk into business-level impact
  • Past experience of running Security Maturity Assessments against NIST 800-53, CCF, and more
  • Deep hands-on experience managing SOC 2, ISO 27001, and TISAX audits - including scoping, control mapping, evidence coordination, and auditor management
  • Experience running Third Party Risk Management programs including vendor tiering, security assessments, and ongoing monitoring
  • Ability to interpret compliance frameworks in practical terms and drive cross-functional remediation without direct authority
  • Strong communication skills - comfortable presenting risk posture and program status to executive leadership and board-level stakeholders
  • Experience with GRC tooling such as Vanta, Drata, OneTrust, or similar platforms

Skills

Required:Security GRCEnterprise Risk AssessmentsNIST 800-53 / Maturity AssessmentsSOC 2, ISO 27001, TISAXThird Party Risk Management (TPRM)
Nice to have:GRC Tools

Benefits

  • Base salary, equity, and benefits including comprehensive health, dental, vision, life and disability insurance, 401k with employer match, learning and wellness stipends, and paid time off
Last updated May 26, 2026. Interested? Apply on the company site.

About Applied Intuition

Building vehicle intelligence | Applied Intuition

Applied Intuition is the vehicle intelligence company with the tools, Vehicle OS, and autonomy stacks for creating safe, AI-powered vehicle experiences.

AIAutonomy stacksSelf-Driving SystemSimulationTesting & ValidationVehicle IntelligenceVehicle OSai-infrastructure-and-development
Company profileWebsite

More open roles at Applied Intuition