Director of Governance, Risk, and Compliance

About the Company

At EliseAI, we're improving the industries that matter most: housing and healthcare. By integrating AI agents deeply into existing workflows, we make them more efficient, reduce costs, and improve the experience for everyone.

Responsibilities

• Own and lead the company's GRC program, setting strategic direction across frameworks including SOC 1, SOC 2, PCI, HITRUST, and HIPAA
• Serve as the primary owner of audit relationships, overseeing planning, evidence collection, and auditor communications
• Define and enforce compliance roadmaps and ensure cross-functional alignment
• Attract, mentor, and manage top-tier talent to scale the GRC team
• Oversee the vendor risk management program and third-party due diligence
• Lead reviews of vendor and client security questionnaires (DDQs)
• Own the security and compliance policy framework and drive organization-wide adoption
• Partner with Legal and Security leadership on security-related contractual obligations

Requirements

• 8+ years of experience in GRC, Information Security, or a related field
• At least 3 years in a leadership or program ownership role
• Deep expertise in SOC1, SOC 2, PCI, HIPAA, and ISO certifications
• Proven track record managing end-to-end audit programs
• Experience building or scaling a GRC function and hiring teams
• Strong understanding of vendor risk management and third-party due diligence
• Ability to translate complex compliance topics for executive and board-level audiences
• Willingness to work in person at the office 4-5 days a week

Benefits

• Equity in the company
• Medical, Dental and Vision premiums covered at 100%
• Fully paid parental leave
• Commuter benefits and 401k
• Fitness & home services stipend
• Collaborative in-office environment with all meals covered
• Unlimited vacation and paid holidays
• Relocation packages available