Security GRC Specialist
About Us: Modal provides the infrastructure foundation for AI teams. With instant GPU access, sub-second container startups, and native storage, Modal makes it simple to train models, run batch jobs, and serve low-latency inference.
What this role actually needs.
About Us: Modal provides the infrastructure foundation for AI teams. With instant GPU access, sub-second container startups, and native storage, Modal makes it simple to train models, run batch jobs, and serve low-latency inference. Responsibilities: - Own and operate compliance frameworks (e.g., SOC 2, ISO 27001, GDPR, etc.) - Drive audits end-to-end: readiness, evidence collection, auditor coordination - Continuously improve controls and reduce compliance overhead through automation - Lead responses to customer security questionnaires, RFPs, and due diligence requests - Partner with Sales and Customer Success to unblock deals and build trust - Develop and maintain security documentation (trust center, whitepapers, FAQs) Requirements: - Identify gaps and drive remediation projects (not just report them) - Run risk assessments across systems, vendors, and processes - Maintain policies and standards, but keep them lightweight and actionable - Track and report on security posture and compliance status - Improve how we manage compliance (evidence collection, control mapping, automation) - Evaluate and implement GRC/security tools where appropriate Company context: Modal is the serverless compute platform built specifically for AI and Python workloads.
Day-to-day expectations
Modal Labs lists these responsibilities for the Security GRC Specialist role.
- Own and operate compliance frameworks (e.g., SOC 2, ISO 27001, GDPR, etc.)
- Drive audits end-to-end: readiness, evidence collection, auditor coordination
- Continuously improve controls and reduce compliance overhead through automation
- Lead responses to customer security questionnaires, RFPs, and due diligence requests
- Partner with Sales and Customer Success to unblock deals and build trust
- Develop and maintain security documentation (trust center, whitepapers, FAQs)
What a strong candidate brings
These requirements are extracted from the source listing and normalized for UpJobz readers.
- Identify gaps and drive remediation projects (not just report them)
- Run risk assessments across systems, vendors, and processes
- Maintain policies and standards, but keep them lightweight and actionable
- Track and report on security posture and compliance status
- Improve how we manage compliance (evidence collection, control mapping, automation)
- Evaluate and implement GRC/security tools where appropriate
Why this listing is more than a copied job post.
Security GRC Specialist is framed against UpJobz source checks, country scope, compensation visibility, and work-authorization signals so candidates can make a faster go/no-go decision.
United States tech market
United States roles on UpJobz are filtered for high-tech relevance, source freshness, and actionable employer detail before they are allowed into SEO surfaces.
Compensation read
$150K - $270K is visible before the click, so candidates can compare the role against local market expectations before applying.
Work authorization read
Current extracted signal: Open to TN, H-1B, and OPT candidates already in the United States. UpJobz treats this as a search signal, not legal advice, and links visa-sensitive roles back to the relevant visa hub where possible.
Location read
On-site roles in New York City should be compared against commute, local salary bands, and nearby employer demand.
Browse similar jobs
Turn this listing into an application plan.
This is the first pass at the premium UpJobz layer: a fast brief that helps serious applicants move with more clarity.
Next moves
- Tailor your resume around ai and llm instead of sending a generic application.
- Use the first two bullets of your application to connect your background directly to security grc specialist is a high-signal on-site role in new york city, and it is most realistic for open to tn, h-1b, and opt candidates already in the united states.
- Open the role quickly if it fits and bookmark three similar jobs before you leave the page.
Interview themes
Watchouts
- $150K - $270K is visible, so calibrate your application around the posted range.
- Use open to tn, h-1b, and opt candidates already in the united states as part of your positioning so the recruiter does not have to infer it.
- Show concrete examples of succeeding in on-site environments.
Keywords to match against your background
Use these terms to decide whether your resume, portfolio, and recent projects line up with the role.
Apply through the employer source
Open the source listing from jobs.ashbyhq.com, confirm the role is still active, then apply on the employer or ATS page.
Source: jobs.ashbyhq.com · Source ID: a1e0ae30-53e8-46ca-b62e-5b633ad26cf4 · Confidence: 92/100 · Last checked: May 7, 2026
How UpJobz verifies job sourcesContinue browsing tech jobs