Senior GRC Specialist

What you’ll do

• Build, implement, and scale compliance programs, controls, and processes across frameworks and regulatory requirements including SOC 2, ISO 27001, HIPAA, ISO 42001, Product Compliance, and FedRAMP/DoD (+others)
• Support and mature compliance efforts related AI governance including work aligned to ISO 42001 and the EU AI Act
• Drive compliance readiness for FedRAMP, DoD, and related public sector requirements, while supporting broader enterprise and customer-facing compliance obligations
• Partner with Security, Engineering, Modeling, Product, Legal, and other cross-functional teams to translate requirements into practical, scalable controls
• Improve compliance operations through automation, tooling, and scalable workflows
• Help build scripts or lightweight tools for evidence collection, reporting, control tracking, and audit readiness
• Manage cross-functional projects, timelines, remediation efforts, and audit preparation
• Support audits, assessments, and customer or regulatory compliance requests.

What we’re looking forYou’ll ideally have 7+ years of progressive experience in the following

• Building and scaling compliance programs across multiple frameworks and regulatory requirements, including SOC 2, ISO 27001, HIPAA, with extensive experience in FedRAMP, DoD, and public sector or highly regulated environments
• AI governance and frameworks such as ISO 42001
• Strong project management and cross-functional execution skills
• Technical fluency and comfort working with Engineering and Security teams
• Automation, workflow tooling, or process design; some hands-on experience with Python or similar scripting for lightweight automation is a plus
• Strong written communication, organization, and attention to detail.

Nice to have

• Experience designing and implementing mature risk management frameworks, including FAIR, quantitative risk methodologies, and other structured enterprise risk models
• Consulting experience in regulated environments, including multi-jurisdictional compliance programs and regulatory requirements across the U.S. and international markets
• Experience with additional frameworks such as NIST CSF, NIST RMF, NIST AI RMF, CMMC, or similar standards
• Experience working in cloud-native, SaaS, or highly technical product environments
• Experience preparing reports, metrics, and presentations for senior leadership, including communicating compliance posture, program progress, and risk insights to executive stakeholders.

Apply:If you are passionate about solving complex revenue challenges in a dynamic AI environment and want to join a team that values technical excellence and innovation, we encourage you to apply.

Working Location:Remote US or Canada

Compensation:Cohere is committed to fair and transparent pay practices. The salary range listed for this role reflects the expected base compensation. Actual compensation offered will be determined by factors such as location, level, job-related knowledge, skills, education, and experience.

For candidates in the US, the Compensation Range is: $140,000 - $220,000 [USD]

For candidates in Canada, the Compensation Range is: $200,000 - 245,000 [CAD]

If any of the above doesn’t line up exactly with your experience, we still encourage you to apply

We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form, and we will work together to meet your needs.

We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.