GRC Manager

About this role

Valence has built the only first-to-market AI native coaching platform for enterprise, offering personalized, expert, and human-like guidance and support to any leader or employee. We’re not just talking about the future of work — we’re building it now, with the most innovative Fortune 500 companies across healthcare, financial services, manufacturing, and technology.

Learn more about our work with Microsoft: Valence Brings AI Coaching More Deeply Into the Flow of Work with Microsoft 365 https://www.valence.co/blog/valence-microsoft-365-may-2026

Our focus is on the problems that actually decide whether AI changes how organizations operate — the ones with no playbook, no obvious answers, and no guarantee of success. If you want to be part of the small group that defines how AI transforms the future at a global scale, this is your chance.

And this isn’t for everyone. We’re not looking for people who want predictability or incremental progress. We only want those who are restless at the edge of what’s possible, who get bored when things feel “done,” and who are driven to redefine what AI can mean for leaders, companies, and the world. Because at Valence, the work worth doing is the kind that redefines work itself.

THE ROLE

We are seeking an experienced Governance, Risk & Compliance (GRC) Manager to help mature and scale Valence's security and compliance program. In this role, you will partner with Engineering, Product, IT, Sales, and Operations to ensure our security program remains effective while enabling the business to move quickly.

You'll own the operational side of our GRC program: managing audits, coordinating risk assessments, maintaining policies and controls, supporting customer assurance, and helping turn compliance from a reactive exercise into a scalable business capability.

This is a highly cross-functional role where success depends on organization, communication, and the ability to influence without authority.

ABOUT VALENCE

We're the only company pioneering leadership coaching for large enterprises in an AI-first way. Our mission is to transform how the world's biggest companies approach learning and development, helping teams work better together through AI-powered personalization that adapts to individual goals and organizational culture using the latest advances in machine learning and natural language processing.

We've been featured in Harvard Business Review, TIME, World Economic Forum, Financial Times, Forbes and an Inc. 5000 fastest-growing private companies in America. Our clients represent the most diverse and sophisticated enterprise AI implementations globally, including Coca-Cola, Delta, Nestlé, General Mills, Schneider Electric, Deutsche Telekom, AstraZeneca, Prudential, CVS and Bristol Myers Squibb.

Working at Valence means you'll work directly with Fortune 500 technology leaders, building expertise through the most complex enterprise deployments while gaining insight into diverse organizational approaches to AI transformation. These aren't just any enterprise clients - they're the companies defining what AI-first business transformation looks like across every major industry.

WHAT YOU'LL DO

- Own the day-to-day operation of Valence's GRC program.

- Maintain and continuously improve our Information Security and Artificial Intelligence Management System for ISO 27001/42001.

- Coordinate SOC 2, ISO 27001, ISO 42001, and other certification efforts.

- Manage the security risk register and facilitate enterprise risk assessments.

- Coordinate internal and external audits.

- Manage security policies, standards, and control documentation.

- Track remediation activities and drive control improvements across teams.

- Support customer security questionnaires, RFPs, and due diligence activities.

- Partner with Engineering to ensure technical controls meet compliance requirements.

- Help develop security metrics and executive reporting.

- Coordinate annual control testing and evidence collection.

- Build scalable governance processes as the company grows.

WHAT WE'RE LOOKING FOR

- Experience managing GRC or security compliance programs.

- A desire to automate GRC tasks, including with the use of AI.

- Strong understanding of security frameworks such as SOC 2, ISO 27001, NIST CSF and ISO 42001.

- Experience with risk management methodologies and maintaining risk registers.

- Experience coordinating internal and external audits.

- Experience working cross-functionally with Engineering, IT, Legal, Privacy and business stakeholders.

- Strong organizational and project management skills.

- Excellent written and verbal communication.

- Comfortable interpreting control requirements and translating them into practical implementation guidance.

- Familiarity with cloud security concepts and requirements (AWS/Azure preferred).

- Experience with GRC platforms such as Vanta, Drata, Secureframe, OneTrust, Archer or similar is a plus.

- Familiarity with privacy regulations and AI governance, including GDPR and the EU AI Act.

WHAT YOU'LL GET

Ownership & Rapid Growth

- Outsized missions from day one, with direct responsibility for company-defining projects

- Work alongside the executive team with transparency into strategy and decision-making

- Influence on direction through real-time customer feedback and market insights

AI-First Operator

- Work directly with cutting-edge AI models and next-generation platforms

- Build expertise in enterprise AI implementation across Fortune 500 companies and multiple industries

- Establish yourself as a recognized leader among peers in shaping how AI transforms work at a global scale

Compensation

- Competitive salary including base + bonuses

- Comprehensive health coverage (medical, dental, vision) from day one

- Generous PTO, company-wide R&R shutdowns, and paid parental leave

- Retirement plan support for US and global employees

- A WFH…