Emergent is revolutionizing software development with autonomous AI agents that generate, test, and deploy applications from simple language. Our cutting-edge systems are already in production globally, used to create millions of applications. With significant ARR growth and a vast user base across numerous countries, we are backed by top-tier investors and led by experienced founders and industry experts.

We are seeking passionate builders who thrive on ownership, speed, and making a global impact. Join us in tackling the complex challenges of AI-driven software creation, focusing on correctness, reliability, security, and scalability in real-world production environments.

As a Governance, Risk & Compliance (GRC) Lead, you will be instrumental in building and managing our comprehensive compliance program. This includes:

- Spearheading certifications and audits for SOC 2, ISO 27001, and other relevant standards, from preparation through renewal. - Ensuring compliance with GDPR and global privacy regulations, covering data residency, DSARs, DPAs, and records of processing. - Developing and implementing controls for emerging AI regulations, such as the EU AI Act, to govern autonomous code generation and execution. - Owning the entire GRC program, including policy development, control evidence collection, vendor risk assessment, and maintaining audit readiness. - Collaborating closely with engineering teams to translate compliance requirements into practical and scalable solutions.

We are looking for a seasoned GRC professional with:

- 5 to 7+ years of experience in GRC, security compliance, privacy, or risk management. - Proven hands-on experience with SOC 2 and ISO 27001 certifications. - A strong understanding of GDPR and global privacy regulations. - Demonstrated experience in managing audits, vendors, controls, and end-to-end compliance programs. - The ability to foster close working relationships with Engineering, Security, Product, and Legal teams.

Candidates who think in systems rather than checklists, possess experience with AI governance or cloud-native products, and are adept at building GRC programs from the ground up, prioritizing practical and scalable controls, will stand out.