Governance, Risk & Compliance (GRC) Lead

The Role

Emergent is scaling a global B2C product used across 190+ countries. We're looking for a GRC Lead to build and run our compliance program across security, privacy, AI, and consumer protection.

What You'll Own
Certifications & Audits: Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal.
Privacy & Data Compliance: Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing.
AI Governance: Define controls for emerging AI regulations, including the EU AI Act, and their application to autonomous code generation and execution.
GRC Program: Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness.
Engineering Partnership: Translate compliance requirements into practical, scalable controls that engineering teams can actually implement.

What We're Looking For
5 to 7+ years in GRC, security compliance, privacy,



or risk
Hands-on experience with SOC 2 / ISO 27001
Solid understanding of GDPR and global privacy
Experience managing audits, vendors, controls, and compliance programs end to end
Ability to work closely with Engineering, Security, Product, and Legal teams

What Sets You Apart
You think in systems, not checklists
Experience with AI governance, EU AI Act, or cloud-native products
Comfortable building GRC programs from the ground up
Prefer practical, scalable controls over paperwork

Why Emergent
Build governance for AI systems that build software
Operate at global scale across 190+ countries
Work directly with founders and core engineering, security, and product teams
Solve emerging challenges at the intersection of AI, security, privacy, and regulation

📌 Senior Grc Engineer Bengaluru
🏢 Emergent
📍 Bengaluru