GRC Analyst

About the Role

GRC at Simile means acting as the bridge between our technical operations and our business objectives, ensuring our frontier AI systems operate with integrity. Your mission is straightforward: making stuff secure and compliant. You will connect governance, risk management, and compliance to protect our organization and our customers without slowing down our fast-paced iteration cycles.

The people who do well here are energized by building scalable processes, digging into hard security problems, and staying on top of the details. You'll move fast, have real ownership early, and work closely with product and research to build a foundation of trust for Fortune 500 organizations across industries.

• Drive Governance & Policy:
  Develop, implement, and maintain practical security policies and standards (e.g., data handling, access control) that align with our business objectives and AI-driven mission.

• Manage Compliance & Audits:
  Act as a Customer Trust Analyst to address security-related inquiries. Track compliance status across key frameworks (e.g., SOC 2, ISO 270001) and maintain the evidence required to demonstrate compliance to auditors and enterprise customers.

• Assess Risk:
  Identify, evaluate, and prioritize IT and security risks, documenting these findings in risk registers and working to mitigate threats across the organization.

• Work Cross-functionally:
  Bridge the gap between compliance requirements and what product and modeling teams build, translating complex requirements into actionable technical security controls.

• Champion Security Awareness:
  Develop and deliver targeted security awareness programs to educate employees and foster a security-conscious culture across the company.

• Experience:
  
  experience working as a Security Compliance Analyst, Customer Trust Analyst, or in a similar GRC role.

• Technical Fluency: professional working proficiency to interpret security metrics, extract data, and assist with technical compliance queries. Strong understanding of risk assessment methodologies.

• Communication: exceptional communicator, including proficiency in presenting risk reports and translating technical concepts for non-technical leadership.

• Team Orientation: proven ability to work collaboratively, utilizing strong team building skills to facilitate cooperation between security, IT operations, developers, and business units.

• Demonstrated leadership potential and a proactive approach to problem-solving.

• Relevant industry certifications such as Security+, CISA, CISM, or CCSK.

• Exposure to cloud security concepts, AI safety frameworks, or data-heavy products.

• Familiarity with enterprise software deployments or B2B SaaS.

At Simile, we provide competitive compensation packages that include base salary, equity, and comprehensive benefits.

• Salary Range: $125,000 – $200,000 USD

• Equity: grants are available for eligible roles, subject to board approval.

• Health & Wellness: comprehensive medical, dental, and vision coverage.

• Time Off: flexible time off policies to support work-life balance.

We prioritize thoughtful conversations and clear examples of past work. Our hiring journey is designed to help both sides align on fit, working style, and expectations.

Reapplication Policy: To ensure a fair and thorough evaluation for all applicants, Simile observes a 90-day waiting period before reconsidering candidates for the same role.

Equal Opportunity: Simile is an equal opportunity workplace. We welcome applicants of all backgrounds and identities, valuing an environment where everyone can contribute authentically.

Accommodations: If you require support or reasonable accommodations during the application process due to a disability, please let us know. We are happy to assist.