Senior GRC Specialist

About the Company

At Fireworks, we’re building the future of generative AI infrastructure. Our platform delivers the highest-quality models with the fastest and most scalable inference in the industry. Fireworks is a Series C company valued at $4 billion and backed by top investors including Benchmark, Sequoia, Lightspeed, Index, and Evantic.

Responsibilities

• Own day-to-day GRC operations including user access reviews, security awareness, and policy enforcement
• Run the risk management program by performing assessments and maintaining the risk register
• Manage third-party risk through vendor and subprocessor assessments and ongoing monitoring
• Design and execute internal audits and facilitate external audit cycles
• Own continuous control monitoring and evidence automation via GRC platforms
• Build relationships with cross-functional partners in engineering, IT, legal, and sales
• Keep the security policy library current and aligned with regulatory frameworks
• Translate program data into actionable insights and metrics for leadership

Requirements

• 5-7 years of experience in GRC, IT audit, or information security
• Working knowledge of SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR, or CCPA
• Experience with GRC platforms such as Anecdotes, Vanta, Drata, or ServiceNow
• Experience running user access reviews and understanding IAM concepts (RBAC, least privilege)
• Hands-on experience with security awareness or phishing simulation platforms
• Comfort with cloud environments (AWS, GCP, or Azure)
• Strong written communication skills for translating technical requirements to non-technical stakeholders
• Highly organized and detail-oriented with a collaborative mindset