Governance, Risk & Compliance (GRC) Lead

The Role

Emergent is scaling a global B2C product used across 190+ countries. We're looking for a GRC Lead to build and run our compliance program across security, privacy, AI, and consumer protection.

What You'll Own

- Certifications & Audits: Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal.
- Privacy & Data Compliance: Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing.
- AI Governance: Define controls for emerging AI regulations, including the EU AI Act, and their application to autonomous code generation and execution.
- GRC Program: Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness.
- Engineering Partnership: Translate compliance requirements into practical, scalable controls that engineering teams can actually implement.

What We're Looking For

- 5 to 7+ years in GRC, security compliance, privacy,



or risk
- Hands-on experience with SOC 2 / ISO 27001
- Solid understanding of GDPR and global privacy
- Experience managing audits, vendors, controls, and compliance programs end to end
- Ability to work closely with Engineering, Security, Product, and Legal teams

What Sets You Apart

- You think in systems, not checklists
- Experience with AI governance, EU AI Act, or cloud-native products
- Comfortable building GRC programs from the ground up
- Prefer practical, scalable controls over paperwork

Why Emergent

- Build governance for AI systems that build software
- Operate at global scale across 190+ countries
- Work directly with founders and core engineering, security, and product teams
- Solve emerging challenges at the intersection of AI, security, privacy, and regulation

📌 Senior GRC Engineer (Bengaluru)
🏢 Emergent
📍 Bengaluru