Governance, Risk & Compliance Lead, Fireworks AI
More information about location
3 days a week in office (San Mateo, CA)
Generative AI platform enabling rapid scaling for developers and businesses
Be an early applicant
Generative AI platform enabling rapid scaling for developers and businesses
101-200 employees
Be an early applicant
More information about location
3 days a week in office (San Mateo, CA)
101-200 employees
Company mission
To help every organization unleash the full power of artificial intelligence.
Role
Who you are
- 7+ years of experience in Governance, Risk, and Compliance (GRC) roles, with at least 3 years in a leadership capacity overseeing audit and certification efforts
- Leading GRC/Security in a high-growth, cloud-native technology environment
- Demonstrated expertise with GRC platforms (e.g., Vanta) to automate and scale compliance operations
- Ability to translate complex regulatory and audit requirements (e.g., ISO, SOC 2) into clear, documented, and actionable engineering work-streams
- Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering
- Self-motivated, detailed and organized, with a diligent approach to project completion
- Excellent written, verbal, and interpersonal communication skills
What the job involves
- Fireworks AI is seeking an experienced Governance, Risk & Compliance (GRC) Lead to build, scale, and mature our compliance and risk management program
- In this role, you will partner closely with engineering, legal, security, and product teams to establish practical controls, manage risk, and support customer trust in our platform
- Design and execute of our Governance, Risk, and Compliance (GRC) strategy, successfully implementing and maintaining key industry frameworks (e.g., SOC 2 Type II, ISO 27001/27701, PCI, HIPAA), ensuring all certification requirements are met
- Oversee all continuous monitoring activities across the compliance program, including but not limited to formal access reviews, ongoing vendor due diligence, policy compliance reviews, and mandatory security training enforcement
- Serve as the primary liaison for all external audit bodies, directing the end-to-end audit lifecycle, from scoping and evidence gathering to artifact review and timely remediation of findings
- Establish and maintain a robust global privacy compliance program for all data processing activities, ensuring adherence to regulations like GDPR, CCPA, and CPRA
- Design and implement scalable GRC processes, documentation, and tooling to support hyper-growth and the efficient adoption of new compliance frameworks (e.g., ISO 42001 for AI)
- Develop and lead the company-wide risk assessment program, identifying, evaluating, and prioritizing data security and compliance risks, and driving the implementation of effective mitigation strategies
- Own the Third-Party Risk Management (TPRM) program, conducting due diligence, and contract review
- Author, update, and enforce all policies, specifically integrating security, data privacy, and the emerging field of AI safety and ethics into the policy lifecycle
- Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices
- Solve Hard Problems: Tackle challenges at the forefront of AI infrastructure, from low-latency inference to scalable model serving
- Build What’s Next: Work with bleeding-edge technology that impacts how businesses and developers harness AI globally
- Ownership & Impact: Join a fast-growing, passionate team where your work directly shapes the future of AI—no bureaucracy, just results
- Learn from the Best: Collaborate with world-class engineers and AI researchers who thrive on curiosity and innovation
Our take
Whilst the development of generative AI is thought to be the reserve of large companies like Open AI, smaller startups such as Firework AI are making this technology easier to access and develop for smaller companies wanting to handle specific business needs using AI. As an open-source model API, it has one of the largest user bases - with over 12,000 users leveraging Fireworks AI’s software.
Though lacking the brand name recognition of generative AI developers like Google and Meta, Fireworks AI differentiates itself in a market crowded with large competitors through its unique approach to deploying its software. It creates smaller, production-grade, customizable generative AI models that can be launched privately and securely, rather than the non-private and inflexible models built by larger companies.
After its 2025 Series C round of $250M, Fireworks AI has been valued at over $4B, an impressive sum for a David in a sea of Goliaths. The company plans to use its funding to reshape AI infrastructure as well as expand globally. It will be interesting to see how the company evolves with its potentially disruptive business approach to generative AI.
Freddie
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 3 rounds)
Oct 2025
$230m
SERIES C
Jul 2024
$52m
SERIES B
Total funding: $307m
Company HQ
Redwood City, CA
Leadership
Lin Qiao
(Co-Founder & CEO)Previously a Senior Director of Engineering at Meta, a Tech Lead at Linkedin, a Research Staff Member at IBM Almaden Research Center and an Advisory Software Engineer at IBM Silicon Valley Lab.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 21 more jobs at Fireworks AI