GRC Specialist - Torq

A self-starter mindset: comfortable with ambiguity, able to set priorities without heavy direction, and capable of building structure where none exists. Demonstrated ability to build compliance and security programs from scratch, not just maintain inherited ones. 2+ years of hands-on experience in information security and GRC, ideally in a fast-moving SaaS or tech environment. Deep familiarity with major frameworks and regulations - SOC 2, ISO 27001, NIST, CIS, DORA, GDPR, and related standards. Practical experience with security and IT tooling across cloud environments (AWS, Azure, or GCP), application security, and infrastructure security. Exposure to SOC (cybersecurity operations center) environments and cybersecurity incident response. Strong written and verbal communication skills - able to translate technical risk into clear language for executives, auditors, and non-technical stakeholders. Hands-on experience with IT and Security tools AI Orientation (Non-Negotiable)- Genuine curiosity and working knowledge of AI tools, LLMs, and automation - you've used them, not just read about them. Experience building or operating AI-assisted workflows for compliance, risk, or security operations is a strong plus. Ability to think critically about AI risk, including how to govern and assess AI systems under frameworks like ISO 42001. Visionary outlook: you see the 2-year horizon where AI has transformed how GRC functions and you want to be the person who builds that future at Torq. As an equal-opportunity employer, we are committed to a team defined and empowered by diversity. We consider qualified applicants without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We are waiting for you! We build AI for a living, and we encourage candidates to use it to prep, research, and sharpen their best work. But we're hiring humans, not chatbots. We want the real you. Use AI to tighten your resume, prep for interviews, research Torq, and outline ideas for written responses. Show up as yourself for live interviews, final assessments (the voice, logic, and reasoning need to be yours), and anywhere we're evaluating how you think - not how you prompt. Excited about our vision and ready to make an impact as we grow? We'd love to see what you can bring to the team.

Compliance Program Ownership Own and lead Torq's security compliance programs across SOC 2, ISO 27001, C5 BSI, and ISO 42001, ensuring continuous readiness and alignment with evolving requirements. Lead the scoping, planning, and implementation of new compliance frameworks as the business scales into new markets and regulatory environments. Act as the primary point of contact for audits - managing evidence collection, auditor relationships, and remediation tracking end-to-end.

A self-starter mindset: comfortable with ambiguity, able to set priorities without heavy direction, and capable of building structure where none exists. Demonstrated ability to build compliance and security programs from scratch, not just maintain inherited ones. 2+ years of hands-on experience in information security and GRC, ideally in a fast-moving SaaS or tech environment. Deep familiarity with major frameworks and regulations - SOC 2, ISO 27001, NIST, CIS, DORA, GDPR, and related standards. Practical experience with security and IT tooling across cloud environments (AWS, Azure, or GCP), application security, and infrastructure security. Exposure to SOC (cybersecurity operations center) environments and cybersecurity incident response. Strong written and verbal communication skills - able to translate technical risk into clear language for executives, auditors, and non-technical stakeholders. Hands-on experience with IT and Security tools AI Orientation (Non-Negotiable)- Genuine curiosity and working knowledge of AI tools, LLMs, and automation - you've used them, not just read about them. Experience building or operating AI-assisted workflows for compliance, risk, or security operations is a strong plus. Ability to think critically about AI risk, including how to govern and assess AI systems under frameworks like ISO 42001. Visionary outlook: you see the 2-year horizon where AI has transformed how GRC functions and you want to be the person who builds that future at Torq. As an equal-opportunity employer, we are committed to a team defined and empowered by diversity. We consider qualified applicants without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We are waiting for you! We build AI for a living, and we encourage candidates to use it to prep, research, and sharpen their best work. But we're hiring humans, not chatbots. We want the real you. Use AI to tighten your resume, prep for interviews, research Torq, and outline ideas for written responses. Show up as yourself for live interviews, final assessments (the voice, logic, and reasoning need to be yours), and anywhere we're evaluating how you think - not how you prompt. Excited about our vision and ready to make an impact as we grow? We'd love to see what you can bring to the team.