Governance, Risk & Compliance

Join Runway, a leading AI company, as a member of the Governance, Risk Management, and Compliance (GRC) staff. In this pivotal role, you will contribute to our governance, risk management, and compliance programs, ensuring the responsible development and deployment of AI systems. You will design and implement a comprehensive GRC framework, lead engagements with external auditors, and partner with AI research teams to develop appropriate safeguards and controls. Additionally, you will create and maintain security policies, oversee security awareness and training programs, and serve as a key advisor to leadership on security, privacy, and AI safety matters. Enjoy a range of benefits, including 100% medical, dental, and vision coverage, unlimited PTO, 401k matching, and more.

• Contribuer aux programmes de gouvernance, de gestion des risques et de conformité de l'entreprise, en particulier en ce qui concerne le développement et le déploiement responsables des systèmes d'IA.
• Concevoir et mettre en œuvre un cadre GRC complet qui aborde à la fois les contrôles de sécurité traditionnels et les considérations de sécurité de l'IA.
• Diriger les engagements avec les auditeurs externes et les évaluateurs pour obtenir et maintenir des certifications de sécurité critiques.
• Experience with cloud security and modern development practices
• Excellent communication skills with ability to effectively engage technical and non-technical stakeholders
• Understanding of machine learning concepts and AI development workflows
• Experience building compliance programs in fast-paced technology environments
• Experience completing customer security questionnaires and supporting Sales on security due diligence
• 7+ years of experience in information security, risk management, or compliance roles
• Deep understanding of security frameworks and standards (NIST, ISO 27001, SOC 2)
• Strong knowledge of privacy regulations and requirements (GDPR, CCPA) including operational experience handling data subject access and deletion requests
• Hands-on experience running SOC 2 Type II and ISO 27001 audits
• Experience in AI/ML company or research organization
• Experience with AI safety and ethics frameworks
• Background in implementing automated security controls