Director of Governance, Risk & Compliance (GRC)

Inkit•San Juan, PR

3d•Onsite

About The Position

We’re looking for a Director of Governance, Risk & Compliance (GRC) to lead our GRC strategy and execution across Inkit. This person will own our Vanta compliance program, define and operationalize the frameworks that keep us compliant (both commercially and with government security standards), and partner with internal and external stakeholders to embed best‑in‑class risk and compliance practices. You’ll be a strategic driver and tactical executor — shaping where we’re going next and ensuring we stay audit‑ready every day.

Requirements

Proven experience leading GRC functions in a B2B SaaS or secure software environment.
Hands‑on experience with compliance platforms (e.g., Vanta) and a strong understanding of relevant frameworks.
Strong communicator who can collaborate effectively across teams and with external parties.
Demonstrated ability to build repeatable risk and compliance processes at scale.

Nice To Haves

Experience with government compliance frameworks (FedRAMP, NIST 800‑53, DoD IL standards).
Prior experience in regulated environments (government contracts, defense, financial services).

Responsibilities

Define and maintain a unified GRC strategy aligned with Inkit’s business goals and growth trajectory.
Evaluate, select, and operationalize compliance frameworks and controls for both commercial and government requirements (e.g., SOC 2, ISO, FedRAMP, NIST, DoD IL standards).
Own and operate our Vanta compliance platform — including controls implementation, automated evidence collection, gap closure, and audit readiness.
Continuously improve our GRC tooling and evidence pipeline to support internal needs and external assurance requests.
Lead enterprise risk assessments and mitigation planning.
Establish, document, and maintain governance policies, risk registers, control matrices, and associated procedures.
Partner with engineering, product, legal, security operations, and business teams to ensure consistent control execution and risk visibility.
Serve as the primary GRC liaison for internal executives and external auditors, assessors, and partners.
Translate complex compliance topics into clear insights for technical and non‑technical audiences alike.
Deliver regular risk and compliance reporting to leadership and key stakeholders.
Prepare for internal and external audits, readiness reviews, and certification assessments.
Coordinate evidence requests, remediation activities, and audit responses.