Director of Governance, Risk, and Compliance

Responsibilities

• Own and lead the company's GRC program, setting strategic direction across frameworks including SOC 1, SOC 2, PCI, HITRUST, and HIPAA
• Serve as the primary owner of audit relationships, overseeing planning, evidence collection, and documentation
• Define and enforce compliance roadmaps and ensure cross-functional alignment
• Attract, mentor, and manage top-tier talent to scale the GRC team
• Oversee the vendor risk management program and third-party due diligence
• Lead reviews of vendor and client security questionnaires (DDQs)
• Own the security and compliance policy framework and drive organization-wide adoption
• Partner with Legal and Security leadership on security-related contractual obligations

Requirements

• 8+ years of experience in GRC, Information Security, or a related field
• At least 3 years in a leadership or program ownership role
• Deep expertise in SOC1, SOC 2, PCI, HIPAA, and ISO certifications
• Proven track record managing end-to-end audit programs with external auditors
• Experience building or scaling a GRC function and managing team development
• Strong understanding of vendor risk management and third-party due diligence
• Ability to communicate complex compliance topics to executive and board-level audiences
• Willingness to work in person at the office 4-5 days a week

Benefits

• Equity in the company
• Medical, Dental and Vision premiums covered at 100%
• Fully paid parental leave
• Commuter benefits
• 401k benefits
• Fitness & home services stipend
• Collaborative in-office environment with all meals covered
• Unlimited vacation and paid holidays
• Relocation packages available

About the Company

EliseAI is improving the housing and healthcare industries by integrating AI agents into existing workflows to increase efficiency and reduce costs.