{"id":36838,"url":"https://alion.io/job/zania-grc-engineer","title":"Senior GRC Lead: Risk & Compliance","company":{"id":8463,"name":"Zania","domain":"zania.com","url":"https://alion.io/company/zania","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Legal","role_family":"Legal","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":170000,"max":230000,"currency":"USD","period":"year","gross":null,"usd_annual":230000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anthropic","optional":false},{"name":"FedRAMP","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-05-27T05:24:09Z","employer_posted_date":"2026-05-27","last_verified_at":"2026-10-16T20:34:20Z","board_verified":true,"closed_at":null,"days_open":142,"trust":{"level":"stale","repost_count":1,"flags":["stale"],"days_open":141},"description":"Why Zania\nEvery enterprise spends millions of dollars on Governance, Risk, and Compliance (GRC). It's one of the most critical, yet universally painful, parts of running a business. For decades, this industry has been dominated by legacy systems with notoriously low NPS scores, making it totally ripe for disruption.\nZania is building agentic AI for Governance, Risk, and Compliance (GRC) to solve this massive problem. We are on a rocketship trajectory, creating intelligent agents that automate and augment the most complex risk and compliance workflows. We have found exceptional product-market fit and are scaling our team very quickly. Some reasons to join Zania are:\nDream Customers: Our customers are the most notable enterprises in the world, including FAANG, Big 4 firms, and a portfolio of top customers.\n\nTier 1 Backing: Funded by a leading Tier 1 venture capital fund. Series A led by NEA, with Anthropic and Menlo Ventures. $18M raised to build a generational company.\n\nWorld-Class Team: Zania is hiring the best. Our team includes AI and Security leaders from Airbnb, Microsoft, Bain & Company, Deloitte, PwC, Brex, and Instacart.\n\nHyper-Growth: We have seen 10x ARR growth in the last year and are rapidly expanding.\n\nCompetitive Compensation & Equity.\n\nThe Role\nAs a Risk and Compliance Expert at Zania, you are the senior GRC voice our customers rely on. This is a non-technical, customer-facing domain expert role. We are looking for someone with in-depth knowledge of specific GRC domains who can serve as the ultimate compliance authority.\nYou will own the customer relationship post-sale, leading transformations and implementations. Because you will be interacting heavily with CISOs and VPs of Risk, you must be exceptionally structured in your communication and highly skilled at managing relationships. You will set clear success goals with every customer, drive engagements toward those milestones with urgency, and know exactly when you have landed the outcome you both committed to.\nIn addition to your customer-facing responsibilities, you will be the GRC depth behind our products. Everything you learn in the field driving implementations will directly shape what Zania builds, ensuring our AI agents behave accurately from a practitioner's standpoint.\nWhat You'll Do\nDrive post-sale transformations: Lead implementations for enterprise customers from scoping and configuration through to a defined go-live. You are a closer who doesn't let engagements drift.\n\nManage senior relationships: Act as the primary customer-facing GRC expert. Communicate in a highly structured way to build trust, manage expectations, and align with executive stakeholders (CISOs, VPs of Risk).\n\nApply in-depth GRC methodology: Provide deep expertise in specific risk and compliance domains. When customers ask complex questions about control mappings or frameworks, you answer with precision and credibility.\n\nShape product decisions: Translate what you hear during customer implementations into a prioritized, opinionated point of view for our product team.\n\nEnsure GRC accuracy: When an agent's output falls short of what a practitioner would accept, diagnose why from a GRC standpoint and define the fix.\n\nRepresentative Projects\nKick off a new enterprise engagement by running a structured goal-setting session with the customer's CISO and GRC lead, defining measurable success outcomes for their post-sale transformation.\n\nSit with a Fortune 500 CISO and their GRC lead to work through how Zania maps to their existing control framework, driving their implementation forward.\n\nRun a structured review of agent output across real customer assessments, leveraging your deep domain expertise to identify failure patterns for the engineering team.\n\nWhat You Have\nDeep GRC Expertise (Depth, not exposure): 5+ years of in-depth knowledge in specific risk and compliance domains, security compliance, or IT audit, with real ownership of programs.\n\nNon-technical domain mastery: You are an expert in GRC methodologies, not software development. You have direct professional experience applying at least two major compliance or risk frameworks (e.g., SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS).\n\nRelationship Management: Executive presence and a proven ability to own relationships with senior security and risk stakeholders. You are comfortable presenting, advising, and pushing back when needed.\n\nStructured Communication: You are highly organized and can translate complex GRC concepts into clear, structured communication for both customers and internal teams.\n\nA closer's instinct: You drive post-sale implementations toward success with urgency, bringing customers to a clear finish line.\n\nMinimum Qualifications\nBachelor's degree in Information Security, Business, Risk Management, or a related field, or equivalent practical experience.\n\n5+ years of hands-on, non-technical experience as an expert in GRC, information security compliance, risk management, or IT audit.\n\nDirect professional experience applying major compliance or risk frameworks (e.g., SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS) or recognized third-party risk methodologies.\n\nProven track record in a customer-facing role driving transformations, implementations, or complex post-sales engagements.\n\nStrong structured written and verbal communication skills, with the ability to command a room and earn trust with executive leadership.\n\nNice to Have\nExperience at a Big 4 or Tier 2 advisory firm (risk advisory, internal audit, or cyber practice).\n\nIn-house GRC experience at a company that was regularly audited or assessed.\n\nHands-on use of GRC platforms such as Archer, OneTrust, AuditBoard, LogicGate, or ServiceNow IRM.\n\nPrior customer success, implementation, or consulting experience.\n\nCompensation & Benefits\nCompetitive salary + significant equity\n\nFlexible PTO\n\nMedical, dental, and vision insurance\n\nMeals and snacks in the office\n\nRelocation and immigration support\n\nZania is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.","description_format":"text","description_chars":6279,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Security Compliance","AI Agents"],"lifecycle":[{"event":"open","at":"2026-05-27T05:24:09Z"},{"event":"close","at":"2026-08-13T11:34:31Z"},{"event":"reopen","at":"2026-09-06T17:10:10Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.29,"p_room":0.28,"age_days":142,"expected_fill_days":24,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":230000,"is_top_pay":true},"html_url":"https://alion.io/job/zania-grc-engineer","json_url":"https://alion.io/job/zania-grc-engineer.json","meta":{"generated_at":"2026-10-17T00:17:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":365,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8463},"rest":"https://alion.io/mcp/rest/get_company?id=8463"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzania-grc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzania-grc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzania-grc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zania-grc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzania-grc-engineer"}]}