{"id":3900615,"url":"https://alion.io/job/blitzy-staff-grc-specialist","title":"Staff GRC Specialist","company":{"id":178299,"name":"Blitzy","domain":"blitzy.com","url":"https://alion.io/company/blitzy","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cambridge, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":160000,"max":240000,"currency":"USD","period":"year","gross":null,"usd_annual":240000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"FedRAMP","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-06T22:06:40Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-10T08:11:37Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Blitzy is a Cambridge, MA based AI software development platform on a mission to revolutionize the software development life cycle by autonomously building custom software to unlock the next industrial revolution. We're transforming how enterprises build software, turning enterprise requirements into enterprise grade code with an agentic software development platform that can autonomously execute 80% of the quantum of software development work. We're backed by multiple tier 1 investors, and have proven success as founders of previous start-ups.\nOur Culture\nWho we are:\nLed by two pioneering co-founders we are one of the fastest growing companies in the U.S., creating our own category of enterprise autonomous software development. We automate thousands of hours of software development for our customers, which includes strong representation within the Fortune 500.\nHow we work:\nWe move Blitzy Fast: Time is both our company’s and our clients’ most precious asset. We move quickly and decisively to innovate internally and deliver exceptional software externally.\n\nChampionship Mindset: We operate like a professional sports team. We win as a team by holding ourselves and each other to high standards, collaborating in-person, and remaining focused on the mission.\n\nPassion for Invention: We’re pushing the frontier of what’s possible, requiring constant innovation and iteration.\n\nWe Work for the Customer: We focus on delivering outsized value to the customers we work with and expanding those relationships into deep, meaningful partnerships.\n\nAbout the Role\nWe're looking for a Staff GRC Specialist to join our GRC team and help run a compliance program that's audit-ready by design, not by scramble. In this role, you'll partner with the Head of GRC to own execution of our existing SOC 2 Type II and ISO 27001 and any future programs end to end, operate Vanta as our system of record, and lead our day-to-day work with internal stakeholders, auditors and compliance partners. You'll work closely with engineering to cut the interrupt load of security questions and evidence requests, and you'll help teammates do the same. You'll also have the opportunity to design the compliance processes that don't exist yet and to help drive our FedRAMP effort, one of the most demanding compliance programs a company can pursue. Our interview process reflects the role itself: a control design and an audit management process walkthrough where you'll talk through a real experience you've had.\nResponsibilities\nLead core compliance assurance programs, including SOC 2 Type II and ISO 27001:2022 readiness end to end, building continuously toward a well executed and low stakeholder impact audit program.\n\nManage auditor and partner relationships directly, keeping management informed on scope and findings.\n\nOwn the automated GRC platform as the system of record - configuring tests, keeping evidence current, and closing gaps before they become findings.\n\nDesign and build the compliance processes that don't exist yet\n\nEvaluate evidence critically rather than take it at face value\n\nSet the standard for security questionnaire and customer compliance responses, taking questions and evidence requests off internal stakeholder's plate and coaching teammates to do the same.\n\nContribute to defining the strategic governance and compliance vision and plans aligned with general Blitzy business priorities\n\nContribute, support and eventually drive some of the wide range of GRC responsibilities, including third party and vendor risk management, customer trust and sales enablement and BC/DR governance.\n\nQualifications\nRequired\n10+ years of experience in compliance assurance, controls and technology risk management.\n\nBachelor’s in information system, computer science or a related field.\n\nPersonal, hands-on ownership of at least one full SOC 2 Type II or ISO 27001:2022 audit cycle - not just adjacent to one.\n\nDirect experience running an automated GRC/compliance platform (Vanta or equivalent) as a primary owner.\n\nA track record of managing multiple compliance initiatives at once as well as navigating auditor, stakeholder and vendor relationships independently, with sound judgment on when to escalate.\n\nThe seniority and judgment to reduce stakeholder interrupt load, not add to it.\n\nClear writing - policies, audit narratives, and questionnaire responses that hold up under scrutiny.\n\nExperience mentoring teammates or setting working standards for others.\n\nNice to Have\nVendor risk management experience\n\nCustomer trust experience (security questionnaires and sales enablement)\n\nPrior work at an early stage/high growth tech company\n\nFedRAMP exposure at any level.\n\nA track record of building a compliance process from scratch, not just running an existing playbook.\n\nExperience managing multiple frameworks concurrently\n\nCISSP, CISA or CISM certification\n\n Compensation: $160,000 -$240,000 + Bonus + Equity\nBlitzy is an equal opportunity employer committed to building a diverse and inclusive team. We believe different perspectives make us stronger. Base salary ranges are determined by country, role, level, experience, and skills. The range displayed on each job posting reflects Blitzy’s good faith determination of the minimum and maximum targets for new hire salaries across all locations. Individual pay is determined by related factors, including job skills, experience, and relevant education or training, which may impact a final offer. Your Talent Partner can share more about the specific salary range during the hiring process","description_format":"text","description_chars":5554,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Agents","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-07T00:39:51Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":252500,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":31,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-10T06:52:35Z"},"pay":{"stated_usd_annual":240000,"is_top_pay":true},"html_url":"https://alion.io/job/blitzy-staff-grc-specialist","json_url":"https://alion.io/job/blitzy-staff-grc-specialist.json","meta":{"generated_at":"2026-11-10T13:09:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30613,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":178299},"rest":"https://alion.io/mcp/rest/get_company?id=178299"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fblitzy-staff-grc-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fblitzy-staff-grc-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fblitzy-staff-grc-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/blitzy-staff-grc-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fblitzy-staff-grc-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3900615}},{"tool":"search_jobs","arguments":{"company":"blitzy.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3900615},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}