# Senior GRC Specialist at Fireworks

- Company: Fireworks
- What the company does: Fireworks’ state of the art training and inference platform take you beyond the frontier, transforming open models into your specialized intelligence. Backed by Bessemer, Index and Lightspeed.
- Company website: https://fireworks.ai/
- Type: Startups (AI role)
- Level: Senior
- Location: San Mateo
- Work setup: On-site
- Pay: $200K to $220K base salary per year (USD)
- Posted: 2026-09-23
- Apply by: 2026-11-07
- Apply: https://jobs.ashbyhq.com/fireworks/f38678eb-77d3-42f4-90aa-f24da0a0e929
- Page: https://www.1752.vc/careers/jobs/fireworks-senior-grc-specialist/

## About the role

We're looking for a GRC Specialist to join our security and compliance team. You'll help us mature our compliance program across frameworks like SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001, and GDPR - supporting audits, managing risk, and partnering with engineering and operations teams to keep our controls effective as we scale.

## What they're looking for

- 5-7 years of experience in GRC, IT audit, information security, or a closely related field
- Working knowledge of major security and privacy frameworks such as SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR, or CCPA
- Experience with GRC platforms (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC)
- Experience running user access reviews and a solid understanding of identity and access management concepts (RBAC, least privilege, segregation of duties, JML processes)
- Hands-on experience administering a security awareness or phishing simulation platform (Adaptive Security, KnowBe4, Hoxhunt, Proofpoint, or similar)
- Comfort with cloud environments (AWS, GCP, or Azure) and how SaaS products are built and operated

Tags: Engineering