# Risk and Compliance Lead

Hiring organization: [Replit](https://career.thegoodapps.co/organizations/replit)

Canonical page: https://career.thegoodapps.co/jobs/bdddf763-e5e5-4a72-ac5c-c25ef384e2fb

Listed on Replit's own careers site. Applications go to them directly.

- Employment type: full time
- Seniority: Senior
- Location: Foster City, CA
- Remote: yes
- Salary: 210000 – 270000 USD per year

## Summary

This role leads Replit's security compliance and audit program, owning certifications like SOC 2 and ISO 27001 while managing the company's risk register and continuous monitoring. It's suited to someone with deep GRC expertise who can balance audit requirements with the practical realities of an AI-native product and wants to build compliance rigor into a high-growth company.

_Our summary, not Replit's wording._

## Skills named

GDPR

## Required

- 8+ years in security compliance, IT audit, or GRC roles
- Direct ownership of at least one SOC 2 and/or ISO 27001 certification cycle
- Working knowledge of SOC 2, ISO 27001, and NIST CSF frameworks
- Hands-on experience authoring or maintaining an ISMS, SSP, or equivalent audit documentation
- Experience owning a formal risk register with risk identification, scoring, treatment plans, and reporting
- Experience with GRC/compliance automation platforms and continuous control monitoring
- Direct experience managing audits end-to-end with external auditors
- Ability to read technical control evidence and discuss systems with engineers
- Working familiarity with GDPR and privacy fundamentals

## Nice to have

- Experience scoping or pursuing ISO 42001 or AI governance frameworks
- Familiarity with FedRAMP or government compliance regimes
- Background in developer tools, platform, or AI/ML product companies
- Relevant certifications (CISA, CISSP, ISO 27001 Lead Auditor/Implementer)
- Experience standing up a compliance program from early or pre-certification stage

Apply on Replit's site: https://jobs.ashbyhq.com/replit/febf5b37-06af-45d8-b4d7-71b344184793/application