HiringCafe
Join our community

203 grc jobs at 151 companies in California

2mo
Save
Mark Applied
Hide
GRC Engineer
Palo Alto or San Francisco
$130k-$170k/yr OnsiteAll Commitments Available
Zania
Zania: Automates enterprise risk and compliance using agentic AI teammates.
3+ YOE3–8 years in GRC, information security, risk management, audit, or enterprise tech customer success; strong frameworks knowledge (SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS); proven stakeholder management and communication; SaaS/technical product experience.
GRC frameworks, SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS
Job PostingView all
3mo
Save
Mark Applied
Hide
GRC Engineer
Foster City, California, United States
$210k-$320k/yr HybridFull Time
Replit
Replit: Cloud-based platform for building and hosting software applications.
8+ YOE8+ years in GRC or information security; deep cloud (GCP/AWS) and security architecture; strong regulatory experience; automation mindset with GRC tools.
GCP, AWS, Vanta, Drata, SOC 2, ISO 27001, PCI, HIPAA
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Security GRC Lead
Austin or Chicago or New York City or Salt Lake City or San Francisco
$121k-$185k/yr OnsiteFull Time
Gong
Gong: AI platform analyzing customer interactions to improve sales performance.
7+ YOE7+ years building/scaling GRC or InfoSec programs, deep expertise with SOC 2/ISO/NIST frameworks, hands-on GRC tooling, policy and risk assessment experience, bachelor’s preferred, relevant certifications strongly preferred.
SOC 2, SOC 2 Type II, ISO 27001, ISO 27017, ISO 27701, ISO 27018, HIPAA, PCI, NIST CSF, GDPR, CCPA, GRC platform
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior GRC Engineer
San Francisco, California, United States
$180k-$200k/yr OnsiteFull Time
Postman
Postman: Platform for building, testing, and managing software APIs.
6+ YOE6+ years GRC experience in tech, SOC2/ISO27001/HIPAA/GDPR/CCPA/FedRAMP knowledge, proficiency in Python or JavaScript, experience integrating GRC tooling, and strong communication.
Python, JavaScript
Job PostingView all
2w
Save
Mark Applied
Hide
GRC Analyst
San Francisco, California, United States
$95k-$150k/yr HybridFull Time
Zip
Zip: AI-powered intake-to-procure platform for enterprise spend management
2+ YOEBachelor's degree,2+ years GRC or security risk/audit experience,knowledge of SOC/ISO/PCI/FedRAMP/WCAG frameworks,strong written and verbal communication.
SOC 1, SOC 2, ISO 27001, ISO 42001, PCI DSS, WCAG, FedRAMP
Job PostingView all
2w
Save
Mark Applied
Hide
GRC Manager
San Francisco or New York or United States
$150k-$250k/yr HybridFull Time
Baseten
Baseten: Scalable infrastructure platform for deploying and serving AI models.
5+ YOE5+ years GRC or security compliance experience in SaaS/cloud; strong knowledge of SOC 2, ISO 27001, NIST, GDPR; audit and certification management; third-party risk and cross-functional collaboration.
Vanta, Drata, Secureframe, Anecdotes, AWS, GCP
Job PostingView all
1mo
Save
Mark Applied
Hide
Security GRC Analyst
San Francisco, California, United States
$116k-$160k/yr OnsiteFull Time
Salesforce
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
2+ YOE2–4 years GRC/compliance/audit or information security experience; working knowledge of at least two of SOC 2, HIPAA, ISO 27001, or GxP; proficiency with GRC/audit tools and Microsoft Office or Google Workspace; strong communication skills.
SOC 2, HIPAA, ISO 27001, GxP, Microsoft Office Suite, Google Workspace, Drata, Vanta, OneTrust, ServiceNow GRC
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior GRC Specialist
San Mateo, California, United States
OnsiteFull Time
Fireworks AI
Fireworks AI: Provides high-performance generative AI model inference and deployment infrastructure.
5+ YOE5+ years in GRC/IT audit or information security; working knowledge of SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR; experience with GRC platforms, user access reviews, security awareness tooling, and cloud environments; strong communication.
Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC, Adaptive Security, KnowBe4, Hoxhunt, Proofpoint, AWS, GCP, Azure
Job PostingView all
3w
Save
Mark Applied
Hide
Head of Security GRC
New York City or Chicago or Austin or Dallas or Denver or Miami or San Francisco or Seattle
$270k-$290k/yr HybridFull Time
DriveWealth
DriveWealth: Provides API-based brokerage infrastructure for fractional stock trading.
15+ YOE15+ years in information security/GRC in regulated financial services; deep SEC/FINRA and global privacy knowledge; hands-on GRC, audit, TPRM, incident response, and executive/board reporting; relevant certifications preferred.
MITRE ATT&CK, FS-ISAC
Job PostingView all
3mo
Save
Mark Applied
Hide
Senior GRC Lead
Vancouver or New York City or San Francisco
$154k-$192k/yr HybridFull Time
Brex
Brex: Corporate cards and spend management software for businesses.
5+ YOE5+ years in GRC or Security Engineering; strong automation; security frameworks SOC 2, PCI DSS, ISO 27001; Python and API integrations; cross-functional collaboration; cloud native; Terraform.
Python, APIs, Terraform, Tines
Job PostingView all
2w
Save
Mark Applied
Hide
GRC Analyst II
Los Angeles or Chicago or Nashville or New York or Seattle
$100k-$135k/yr HybridFull Time
Metropolis
Metropolis: Computer vision technology for checkout-free parking and retail payments.
3+ YOE3+ years in information security GRC or technology compliance; experience managing security awareness programs; knowledge of SOC 2 and PCI-DSS; familiarity with AI/data security and training platforms; bachelor\u0002s degree required.
SOC 2, PCI-DSS, automated employment decision tool (AEDT)
Job PostingView all
6d
Save
Mark Applied
Hide
SAP GRC Consultant (GRC 12.0 AC/PC)
Rosemead, California, United States
OnsiteContract
Delan Associates
Delan Associates: Provides engineering and professional services to government agencies.
15+ YOERequires 15+ years of experience with SAP GRC 12.0 AC/PC, implementation and upgrades, access controls, risk management, cloud integration, testing, deployment, and production support.
SAP GRC 12.0 Access Control (AC), SAP GRC 12.0 Process Control (PC), Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), Business Role Management (BRM), Segregation of Duties (SoD), MSMP, SAP GRC Cloud, SAP GRC SuccessFactors (SF)
Job PostingView all
1w
Save
Mark Applied
Hide
Security GRC Specialist
South San Francisco or Toronto
OnsiteFull Time
Phylo
Phylo: An applied research lab building AI agents for biomedical discovery.
5+ YOE5+ years in security GRC or adjacent role; experience leading SOC 2, ISO 27001, HIPAA, FedRAMP or similar; cloud and application security knowledge; audit and enterprise customer review experience; strong cross-functional communication.
Job PostingView all
4w
Save
Mark Applied
Hide
Senior Security GRC Analyst
San Mateo, California, United States
$224k-$272k/yr HybridFull Time
Roblox
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years GRC experience, risk assessment and policy development, ability to work with engineers, knowledge of compliance frameworks and security controls.
Factor Analysis of Information Risk (FAIR), Roblox Studio
Job PostingView all
2mo
Save
Mark Applied
Hide
Senior IT GRC Analyst
Hillsboro or Irvine or Phoenix or Tacoma or Utah or San Diego or Denver or Liberty Lake or Los Angeles or Las Vegas or Seattle
$80k-$165k/yr OnsiteFull Time
Columbia Bank
Columbia BankNASDAQ: COLB: Commercial and consumer banking services in the Western United States.
7+ YOE7+ years in information security/IT audit/operations; ServiceNow IRM/GRC experience; knowledge of NIST, FFIEC, CIS, ITIL, COBIT; familiarity with PCI DSS, GLBA, HIPAA; bachelor’s preferred.
ServiceNow IRM/GRC, NIST CSF, FFIEC, CIS, ITIL, COBIT, ISO 27002, NIST 800, PCI DSS, GLBA, HIPAA, Cybersecurity Assessment Tool (CAT)
Job PostingView all
2mo
Save
Mark Applied
Hide
GRC Engineer
San Mateo, California, United States
$200k-$250k/yr OnsiteFull Time
Verkada
Verkada: Sells integrated AI-powered cloud physical security hardware and software.
7+ YOE7+ years in security/IT compliance; audits (SOC 2, ISO27001); AWS experience; strong communication; able to work onsite; scripting bonus.
AWS
Job PostingView all
2mo
Save
Mark Applied
Hide
GRC Risk Manager
Los Angeles or United States
$108k-$180k/yr OnsiteFull Time
SHEIN
SHEIN: Global online retailer selling affordable fashion and lifestyle products.
7+ YOE7+ years in information security risk management; bachelor’s degree; CISSP/CISM/CISA or ISO 27001 Lead Auditor desirable; strong standards knowledge; team leadership experience.
GRC tools
Job PostingView all
1mo
Save
Mark Applied
Hide
Principal, Cybersecurity & AI GRC
Rosemead, California, United States
$157k-$220k/yr HybridFull Time
Panda Restaurant Group
Panda Restaurant Group: Operator of American Chinese fast-casual restaurant chains.
7+ YOEBachelor's degree, 7+ years GRC/privacy/security/technology risk experience, knowledge of AI governance and cybersecurity frameworks, policy and program design, and strong advisory skills.
NIST AI RMF, EU AI Act, ISO 42001, NIST CSF, NIST 800-53, ISO 27001, ISO 27002, CIS
Job PostingView all
1w
Save
Mark Applied
Hide
GRC Controls Automation Engineer
Austin or Chicago or New York City or Redwood City or San Francisco or United States
$130k-$145k/yr HybridFull Time
Box
BoxNYSE: BOX: Provides cloud-based content management and secure file sharing services.
5+ YOE5+ years in SaaS GRC or information security; GCP, AI architectures, data governance, model validation, NIST, PCI, ISO, SOC 2, communication, and process improvement experience.
GCP, AI, NIST 800-53, PCI, ISO 27x, AICPA SOC, SOC 2
Job PostingView all
3w
Save
Mark Applied
Hide
Senior GRC Specialist
Mexico City or San Francisco
$120k-$185k/yr HybridFull Time
Airwallex
Airwallex: Global financial platform for business payments and money management.
5+ YOE5-7 years cybersecurity experience, Mexican Tax ID (RFC) or dual Mexican citizenship required, fluent English and Spanish, knowledge of PCI-DSS/ISO 27001/SOC2, fintech and cloud compliance experience, CISSP/CEH/CISA strong advantage.
PCI-DSS, ISO 27001, SOC2
Job PostingView all

Explore Jobs

Expand Your Job Search