Senior GRC Specialist

About the role

This role focuses on developing and implementing compliance programs within Cohere, an AI company. The specialist will be responsible for scaling controls and processes across multiple regulatory frameworks, including SOC 2, ISO 27001, HIPAA, and specifically ISO 42001 for AI governance. A significant part of the work involves driving compliance readiness for public sector requirements like FedRAMP and DoD, requiring collaboration with various internal teams to translate requirements into practical controls.

The position emphasizes improving compliance operations through automation and scalable workflows. This includes building scripts or lightweight tools for tasks such as evidence collection, reporting, and audit readiness. The specialist will also manage cross-functional projects, timelines, and remediation efforts, ensuring the company is prepared for audits and can effectively respond to customer and regulatory compliance requests.

Success in this role means establishing robust and scalable compliance programs that support Cohere's enterprise AI offerings, particularly in highly regulated environments. It involves effectively partnering with engineering, security, and product teams to embed compliance into operations, demonstrating strong project management skills to navigate complex requirements, and utilizing technical fluency to implement automation for efficiency.

The annual salary for this role ranges from $140,000 to $220,000 USD.

Skills that matter here

• compliance: This role requires building, implementing, and scaling compliance programs across multiple frameworks and regulatory requirements.
• risk management: The specialist will contribute to maturing compliance efforts, which inherently involves managing and mitigating risks.
• AI governance: A key responsibility is supporting and maturing compliance efforts specifically related to AI governance, including ISO 42001 and the EU AI Act.
• project management: The role involves managing cross-functional projects, timelines, remediation efforts, and audit preparation.
• automation: The specialist will improve compliance operations through automation, tooling, and scalable workflows.
• Python: Some hands-on experience with Python or similar scripting is a plus for building lightweight tools for automation.

Who this role suits

• A person with 7+ years of progressive experience in building and scaling compliance programs, especially in public sector or highly regulated environments.
• Someone with extensive experience in FedRAMP, DoD, and AI governance frameworks like ISO 42001.
• An individual who possesses strong project management skills and can effectively execute cross-functional initiatives.
• A candidate who is technically fluent, comfortable working with engineering and security teams, and has experience with automation or process design.

From the employer

What You’ll Do

• Build, implement, and scale compliance programs, controls, and processes across frameworks and regulatory requirements including SOC 2, ISO 27001, HIPAA, ISO 42001, Product Compliance, and FedRAMP/DoD (+others)
• Support and mature compliance efforts related AI governance including work aligned to ISO 42001 and the EU AI Act
• Drive compliance readiness for FedRAMP, DoD, and related public sector requirements, while supporting broader enterprise and customer-facing compliance obligations
• Partner with Security, Engineering, Modeling, Product, Legal, and other cross-functional teams to translate requirements into practical, scalable controls
• Improve compliance operations through automation, tooling, and scalable workflows
• Help build scripts or lightweight tools for evidence collection, reporting, control tracking, and audit readiness
• Manage cross-functional projects, timelines, remediation efforts, and audit preparation
• Support audits, assessments, and customer or regulatory compliance requests.

What We’re Looking For

You’ll ideally have 7+ years of progressive experience in the following:

• Building and scaling compliance programs across multiple frameworks and regulatory requirements, including SOC 2, ISO 27001, HIPAA, with extensive experience in FedRAMP, DoD, and public sector or highly regulated environments
• AI governance and frameworks such as ISO 42001
• Strong project management and cross-functional execution skills
• Technical fluency and comfort working with Engineering and Security teams
• Automation, workflow tooling, or process design; some hands-on experience with Python or similar scripting for lightweight automation is a plus
• Strong written communication, organization, and attention to detail.

Full-Time Employees at Cohere Enjoy These Perks

• A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
• Full health and dental benefits, including a separate budget for mental health.
• RRSP matching, 401K, Pension Scheme.
• 100% Parental Leave top-up for up to 6 months, for either parent.
• Annual enrichment benefits:
• Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
• Education & learning stipend for conferences, courses, and coaching.
• 6 weeks of paid vacation (30 working days!)
• Budget for traveling to other offices if you are remote, plus an annual company offsite.