Director of Governance, Risk, and Compliance (GRC) - Cerebras Systems
Cerebras Systems builds the world's largest AI chip, 56 times larger than GPUs. Our novel wafer-scale architecture provides the AI compute power of dozens of GPUs on a single chip, with the programming simplicity of a single device. This approach allows Cerebras to deliver industry-leading training and inference speeds and empowers machine learning users to effortlessly run large-scale ML applications, without the hassle of managing hundreds of GPUs or TPUs.
Cerebras' current customers include global corporations across multiple industries, national labs, and top-tier healthcare systems. In January, we announced a multi-year, multi-million-dollar partnership with Mayo Clinic, underscoring our commitment to transforming AI applications across various fields. In August, we launched Cerebras Inference, the fastest Generative AI inference solution in the world, over 10 times faster than GPU-based hyperscale cloud inference services.
About The Role
The Director of Governance, Risk, and Compliance (GRC) is accountable for establishing and scaling a risk-centric, engineering-driven compliance program that supports the security, privacy, and regulatory posture of the organization. The ideal candidate will bring a unique blend of deep technical acumen and regulatory expertise, enabling the creation of compliance mechanisms that are measurable, automated, and resilient. This is a strategic, cross-functional, and customer-facing leadership role reporting directly to the CISO.
A successful candidate would have strong engineering background alongside a comprehensive understanding of regulatory frameworks (e.g., NIST, ISO, SOC 2, PCI-DSS). They will be responsible for transforming compliance into a proactive, testable discipline using automation, continuous auditing, and AI-based prioritization.
Key Responsibilities
GRC Strategy & Program Leadership
- Design and implement a compliance strategy that embeds engineering principles (e.g., code-based controls, CI/CD-integrated validations).
- Develop a compliance operating model that includes automated control testing, self-service reporting, and AI-enhanced risk analysis.
- Define and manage the GRC roadmap aligned with business priorities, regulatory requirements, and customer obligations.
- Establish a governance framework to enforce accountability across all compliance stakeholders.
Security, Privacy, and Risk Management
- Build and maintain enterprise-level risk registers, control matrices, and audit readiness documentation.
- Oversee regulatory assessments, internal/external audits, and certification initiatives (e.g., SOC 2, ISO 27001).
- Implement continuous control monitoring and evidence collection pipelines integrated into cloud-native and on-prem environments.
Engineering-Based Compliance Enablement
- Partner with engineering and product teams to define and codify security and compliance requirements as part of the SDLC.
- Introduce automated security/compliance tests into CI/CD pipelines to support shift-left practices.
- Drive usage of GenAI for compliance gap detection, policy mapping, risk triaging, and customer assurance functions.
Customer-Facing Security Enablement
- Serve as the security and compliance representative in customer meetings, RFPs, and audits.
- Build and scale a customer trust program that provides transparency and assurance through real-time evidence, standardized reporting, and proactive communication.
- Lead internal readiness for third-party audits and external assessments and maintain ongoing compliance posture.
Team Building and Leadership
- Build and lead a high-performing GRC team with expertise in both engineering and compliance domains.
- Foster a results-driven, agile work culture focused on automation, clarity, and customer enablement.
- Drive operational excellence by establishing key performance indicators (KPIs) and service-level objectives (SLOs).
Skills And Qualifications
Required Experience
- Bachelor’s degree in computer science, Cybersecurity, or related engineering field; advanced degree preferred.
- Minimum 10 years of progressive experience in security engineering, risk management, or compliance leadership.
- Proven success leading compliance programs in cloud-native, SaaS/PaaS environments with high automation maturity.
- Demonstrated ability to manage customer-facing compliance engagements and audit preparation.
Technical and Domain Expertise
- Deep knowledge of regulatory frameworks (NIST 800-53, ISO 27001, SOC 2, PCI-DSS, HIPAA).
- Proficiency in cloud security, DevSecOps practices, and infrastructure-as-code (IaC) security tooling.
- Experience implementing automated compliance and control validation pipelines.
- Familiarity with AI/ML usage in security operations and risk analysis is highly desirable.
Soft Skills
- Excellent communication, stakeholder management, and executive reporting skills.
- Ability to influence cross-functional teams and operate in fast-paced, high-growth environments.
- Strong analytical and decision-making capabilities.
Why Join Cerebras
People who are serious about software make their own hardware. At Cerebras we have built a breakthrough architecture that is unlocking new opportunities for the AI industry. With dozens of model releases and rapid growth, we’ve reached an inflection point in our business. Members of our team tell us there are five main reasons they joined Cerebras:
- Build a breakthrough AI platform beyond the constraints of the GPU.
- Publish and open source their cutting-edge AI research.
- Work on one of the fastest AI supercomputers in the world.
- Enjoy job stability with startup vitality.
- Our simple, non-corporate work culture that respects individual beliefs.
Read our blog: Five Reasons to Join Cerebras in 2025.
Apply today and become part of the forefront of groundbreaking advancements in AI!
Cerebras Systems is committed to creating an equal and diverse environment and is proud to be an equal opportunity employer. We celebrate different backgrounds, perspectives, and skills. We believe inclusive teams build better products and companies. We try every day to build a work environment that empowers people to do their best work through continuous learning, growth and support of those around them.
This website or its third-party tools process personal data. For more details, click here to review our CCPA disclosure notice.
Last updated: 3 hours ago
© 2021 - 2024