← All roles

Senior GRC Specialist

Fireworks AI· G&A
Apply on company site
San Mateo, CAFull-timePosted 3mo ago

About the role

GRC Specialist to mature Fireworks' compliance program across multiple frameworks, own operational GRC cornerstones from day one, manage risk and third-party risk, and drive audits and program maturity in a fast-moving SaaS environment.

Responsibilities

  • Own day-to-day GRC operations - including user access reviews and certifications, security awareness and phishing/deepfake simulation facilitation, JML tracking, and triage and enforcement of policy and control exceptions.
  • Run the risk management program - perform annual and ad-hoc risk assessments, maintain the risk register, partner with risk owners on remediation, and track issues through to closure.
  • Manage third-party risk - run vendor and subprocessor risk assessments, conduct ongoing monitoring, and track remediation across our critical vendors.
  • Design and execute targeted internal audits to test control effectiveness, and facilitate or support external audit cycles by coordinating evidence, control owners, and remediation.
  • Own continuous control monitoring and evidence automation - administer our GRC platform, keep automated control tests and evidence healthy, and maintain audit readiness year-round.
  • Build and foster relationships with cross-functional partners across engineering, IT, operations, legal, and sales - meeting teams where they are rather than gatekeeping.
  • Partner with control owners to educate them on their control responsibilities, ownership, and expectations; prepare them for audits; and help operationalize controls.
  • Keep the policy library current - review and update security policies, standards, and procedures so they stay practical and aligned to the frameworks we operate under.
  • Turn program data into action - translate access review, awareness, and risk findings into insights and metrics that flag high-risk users, teams, or behaviors, report to leadership, and drive targeted interventions.
  • Take on additional GRC projects as the program evolves; growth includes broader audit leadership and program maturity.

Qualifications

  • 5-7 years of experience in GRC, IT audit, information security, or a closely related field
  • Working knowledge of major security and privacy frameworks such as SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR, or CCPA
  • Experience with GRC platforms (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC)
  • Experience running user access reviews and a solid understanding of identity and access management concepts (RBAC, least privilege, segregation of duties, JML processes)
  • Hands-on experience administering a security awareness or phishing simulation platform (Adaptive Security, KnowBe4, Hoxhunt, Proofpoint, or similar)
  • Comfort with cloud environments (AWS, GCP, or Azure) and how SaaS products are built and operated
  • Strong written communication; ability to translate control requirements and security concepts for engineers, customers, and non-technical employees
  • Detail-oriented and organized, with ability to juggle multiple audits, campaigns, and deadlines
  • A collaborative mindset; enjoys cross-team work rather than gatekeeping

Skills

Required:GRC program managementAuditing and control testingVendor and third-party risk managementIdentity and access managementSecurity awareness and phishing simulationsGRC tooling (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC)Cloud platforms

Benefits

  • Fireworks AI is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all innovators.
Last updated Jul 29, 2026. Interested? Apply on the company site.
Fireworks AI logo

About Fireworks AI

Fastest Inference for Generative AI

Use state-of-the-art, open-source LLMs and image models at blazing fast speed, or fine-tune and deploy your own at no additional cost with Fireworks AI!

Generative AIImageLLMMultimediaSearchai-infrastructure-and-developmentliquid-ai-recruiting-targetllm
Company profileWebsite

More open roles at Fireworks AI