GRC Specialist

About the role

The GRC Specialist, Automation & Technology at Collibra is responsible for collaborating with the GRC and Internal Audit teams to architect and deploy AI-driven agent capabilities, such as multi-step Claude workflows, Workato recipes, and autonomous control monitoring processes in order to eliminate repeatable manual GRC overhead and streamline evidence validation.

Responsibilities

• Collaborate with the GRC and Internal Audit teams to architect and deploy AI-driven agent capabilities, such as multi-step Claude workflows, Workato recipes, and autonomous control monitoring processes in order to eliminate repeatable manual GRC overhead and streamline evidence validation.
• Engineer continuous control monitoring pipelines and real-time control checks for our key security frameworks in order to shift Collibra from point-in-time sampling to an always-audit-ready risk posture.
• Support the technical GRC infrastructure integration of new cloud environments into our control framework starting in Q3.
• Facilitate automated governance guardrails and continuous monitoring systems for our expanding portfolio (i.e. AIUC-1) in order to maintain ongoing compliance.
• Partner closely with Internal Audit and GRC colleagues to evaluate manual processes and controls and leverage orchestration and automation platforms in order to maximize the strategic efficiency and impact of our risk mitigation practices.
• Help design automated key risk indicator (KRI) and key performance indicator (KPI) reporting to senior management.
• Administer the day-to-day functions of Collibra's GRC platforms and tools (i.e. Optro) to maintain a reliable source of truth.

Requirements

• 3+ years of experience in a technical compliance role, IT internal audit, or GRC environment, ideally within an enterprise SaaS platform.
• Experience building workflow automations using industry standard platforms (e.g., Workato, Claude, or native GRC platform automation engines).
• Hands-on experience reviewing or auditing cloud environments (Cloud infrastructure, IAM, and native logging systems) and AI programs.
• A bachelor's degree or equivalent related working experience is required.

Qualifications

• One or more current qualifications is nice-to-have: CISA, CRISC, CISSP, CIA, CPA, or relevant cloud/automation certifications (e.g., Azure, AWS, GCP, Workato).

Skills

• Passionate about automation and efficiency, with a strong interest in leveraging AI and orchestration tools to optimize risk practices.
• Knowledgeable about information security fundamentals, cloud compliance principles, and the core mechanics of continuous control monitoring.
• Familiar with performing control testing or supporting technology audits, with some exposure to cloud environments (AWS/GCP/Azure) and enterprise ecosystems.
• Familiar with common control frameworks, specifically ISO 27001, ISO 42001, NIST AI, SOC 2, gained through direct support of an audit or compliance program. Familiarity with AIUC-1 is nice to have.
• Ability to translate manual compliance workflows into structured logic and discuss technical automation requirements clearly with stakeholders.
• Strong problem-solving and analytical skills to proactively identify repeatable day-to-day bottlenecks and design automated, sustainable solutions.

Benefits

• Standard base salary range: $88,000.00 - $110,000.00 per year.
• Equity ownership at every level.
• Bonus potential.
• A Flex Fund monthly stipend.
• Pension/401k plans.

Pay

The standard base salary range for this position is $88,000.00 - $110,000.00 per year. This position is not eligible for additional commission-based compensation. Salary offers are based on a combination of factors, including, but not limited to, experience, skills, and location.

Schedule

This is a hybrid role based in our New York City office. Our hybrid model means you'll work from the office at least two days each week. This setup helps us stay connected, work more closely together, and keep making progress as a team.