---
title: 'Senior GRC Lead: Risk & Compliance at Zania'
canonical: 'https://feeny.ai/job/senior-grc-lead-risk-compliance-zania-palo-alto-r7cjfd25ady5'
type: 'job'
last_seen: '2026-11-03'
---

# Senior GRC Lead: Risk & Compliance at Zania

- **Company:** Zania
- **Location:** Palo Alto, CA
- **Compensation:** $170k–$230k
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-05-27
- **Last confirmed live:** 2026-11-03
- **Apply:** https://jobs.ashbyhq.com/zania/29603f87-6df6-49bc-abc9-4aabde1f877f

## Job description

## Why Zania

Every enterprise spends millions of dollars on Governance, Risk, and Compliance (GRC). It's one of the most critical, yet universally painful, parts of running a business. For decades, this industry has been dominated by legacy systems with notoriously low NPS scores, making it totally ripe for disruption. Zania is building agentic AI for Governance, Risk, and Compliance (GRC) to solve this massive problem. We are on a rocketship trajectory, creating intelligent agents that automate and augment the most complex risk and compliance workflows. We have found exceptional product-market fit and are scaling our team very quickly. Some reasons to join Zania are:

- Dream Customers: Our customers are the most notable enterprises in the world, including FAANG, Big 4 firms, and a portfolio of top customers.
- Tier 1 Backing: Funded by a leading Tier 1 venture capital fund. Series A led by NEA, with Anthropic and Menlo Ventures. $18M raised to build a generational company.
- World-Class Team: Zania is hiring the best. Our team includes AI and Security leaders from Airbnb, Microsoft, Bain & Company, Deloitte, PwC, Brex, and Instacart.
- Hyper-Growth: We have seen 10x ARR growth in the last year and are rapidly expanding.
- Competitive Compensation & Equity.

## The Role

As a Risk and Compliance Expert at Zania, you are the senior GRC voice our customers rely on. This is a non-technical, customer-facing domain expert role. We are looking for someone with in-depth knowledge of specific GRC domains who can serve as the ultimate compliance authority. You will own the customer relationship post-sale, leading transformations and implementations. Because you will be interacting heavily with CISOs and VPs of Risk, you must be exceptionally structured in your communication and highly skilled at managing relationships. You will set clear success goals with every customer, drive engagements toward those milestones with urgency, and know exactly when you have landed the outcome you both committed to. In addition to your customer-facing responsibilities, you will be the GRC depth behind our products. Everything you learn in the field driving implementations will directly shape what Zania builds, ensuring our AI agents behave accurately from a practitioner's standpoint.

## What You'll Do

- Drive post-sale transformations: Lead implementations for enterprise customers from scoping and configuration through to a defined go-live. You are a closer who doesn't let engagements drift.
- Manage senior relationships: Act as the primary customer-facing GRC expert. Communicate in a highly structured way to build trust, manage expectations, and align with executive stakeholders (CISOs, VPs of Risk).
- Apply in-depth GRC methodology: Provide deep expertise in specific risk and compliance domains. When customers ask complex questions about control mappings or frameworks, you answer with precision and credibility.
- Shape product decisions: Translate what you hear during customer implementations into a prioritized, opinionated point of view for our product team.
- Ensure GRC accuracy: When an agent's output falls short of what a practitioner would accept, diagnose why from a GRC standpoint and define the fix.

Representative Projects

- Kick off a new enterprise engagement by running a structured goal-setting session with the customer's CISO and GRC lead, defining measurable success outcomes for their post-sale transformation.
- Sit with a Fortune 500 CISO and their GRC lead to work through how Zania maps to their existing control framework, driving their implementation forward.
- Run a structured review of agent output across real customer assessments, leveraging your deep domain expertise to identify failure patterns for the engineering team.

## What You Have

- Deep GRC Expertise (Depth, not exposure): 5+ years of in-depth knowledge in specific risk and compliance domains, security compliance, or IT audit, with real ownership of programs.
- Non-technical domain mastery: You are an expert in GRC methodologies, not software development. You have direct professional experience applying at least two major compliance or risk frameworks (e.g., SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS).
- Relationship Management: Executive presence and a proven ability to own relationships with senior security and risk stakeholders. You are comfortable presenting, advising, and pushing back when needed.
- Structured Communication: You are highly organized and can translate complex GRC concepts into clear, structured communication for both customers and internal teams.
- A closer's instinct: You drive post-sale implementations toward success with urgency, bringing customers to a clear finish line.

## Minimum Qualifications

- Bachelor's degree in Information Security, Business, Risk Management, or a related field, or equivalent practical experience.
- 5+ years of hands-on, non-technical experience as an expert in GRC, information security compliance, risk management, or IT audit.
- Direct professional experience applying major compliance or risk frameworks (e.g., SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS) or recognized third-party risk methodologies.
- Proven track record in a customer-facing role driving transformations, implementations, or complex post-sales engagements.
- Strong structured written and verbal communication skills, with the ability to command a room and earn trust with executive leadership.

## Nice to Have

- Experience at a Big 4 or Tier 2 advisory firm (risk advisory, internal audit, or cyber practice).
- In-house GRC experience at a company that was regularly audited or assessed.
- Hands-on use of GRC platforms such as Archer, OneTrust, AuditBoard, LogicGate, or ServiceNow IRM.
- Prior customer success, implementation, or consulting experience.

## Compensation & Benefits

- Competitive salary + significant equity
- Flexible PTO
- Medical, dental, and vision insurance
- Meals and snacks in the office
- Relocation and immigration support

Zania is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.

## About Zania

## Company Overview
- **One-liner**: Zania provides an autonomous AI agent platform that executes Governance, Risk, and Compliance (GRC) work, including controls testing, risk assessments, audits, and security questionnaires.
- **Entity Type**: Private (Series A)
- **Headquarters**: Palo Alto, California, USA
- **Founded**: 2023
- **Founders**: Shruti Gupta

## Core Business
- **Primary industry**: AI-powered Governance, Risk, and Compliance (GRC) / Cybersecurity
- **Target customers**: B2B, Enterprise (Fortune 500, Big Four audit & advisory firms, CISOs, Heads of GRC, TPRM leaders)
- **Mission or purpose statement**: To automate and execute complex GRC work with provable accuracy, replacing manual processes with autonomous AI agents.

## Products & Services
- **Autonomous Third-Party Risk Management (TPRM)**: AI agents that handle vendor risk tiering, evidence collection, validation, follow-ups, and continuous monitoring end-to-end.
- **First-Party Risk**: AI-driven qualitative and quantitative risk evaluations based on a company's unique systems, controls, and data.
- **Continuous Compliance**: Agents that continuously collect evidence, identify gaps against any framework (SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF, GDPR, etc.), and assist with remediation.
- **Controls Testing**: Autonomous testing of 100% of controls for both design and operating effectiveness, with actionable recommendations.
- **Security Questionnaires**: AI that leverages a company's security context to answer incoming vendor questionnaires with precision in minutes.
- **Self-Governing Policies**: Policies that update themselves to stay in sync with a company's compliance and tech stack.
- **Agent-Driven Risk Intelligence**: Continuous monitoring of vendors using data from integrations, incidents, supply chain, threat intel, breach history, and company profiles.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed
- **Key Metric**: Total Funding of $18.0M (Series A, led by NEA, announced October 2025)
- **Notable Investors/Partners**: NEA (lead), Menlo Ventures, Anthropic, Palm Drive Capital, AWS ISV Accelerate Program. Advisors include Mike Curtis (Ex-Head of Eng, Airbnb), Anand Deshpande (Founder & Chairman, Persistent Systems), and George Kurtz (Founder & CEO, Crowdstrike).
- **Growth Signals**: Trusted by Fortune 500 companies and Big Four audit & advisory firms. Launched "Autonomous TPRM" in February 2026. Headcount grew 17.6% YoY. Active job postings grew 125% YoY. LinkedIn follower count grew 85.7% yearly.

## Competitive Advantages
- **Purpose-built AI agents** for GRC, not a general-purpose LLM wrapper — trained on domain-specific GRC workflows.
- **Provable accuracy and explainability**: Features like confidence scores, visible reasoning, source references, and deep research make outputs audit-ready.
- **Enterprise-grade security**: SOC 2 Type 2 compliant, private models with no training on customer data, and a reported hallucination rate of <0.01%.
- **End-to-end workflow automation**: Agents handle the entire GRC process from evidence collection to remediation, not just individual tasks.
- **Founder-led domain expertise**: CEO Shruti Gupta previously led AI at Microsoft and held founding security/CISO roles at Airbnb, Instacart, and Brex.

## Strategic Focus
- **Autonomous execution**: Shifting GRC from human-led processes with AI assistance to agent-led execution with human oversight.
- **Expanding TPRM capabilities**: Launched "Autonomous TPRM" in February 2026 to fully automate vendor risk management.
- **Continuous compliance**: Moving from point-in-time audits to 24/7 continuous monitoring and evidence collection.
- **Enterprise scale**: Targeting deeper penetration into Fortune 500 and Big Four firms.

## Why Work Here
- **Rocketship growth**: Early-stage, well-funded startup ($18M Series A) with strong investor backing from top-tier VCs (NEA, Menlo Ventures) and strategic partners (Anthropic).
- **Compelling mission**: Opportunity to build the future of AI-driven GRC, a massive market with high demand.
- **Compensation**: Top-of-market pay with meaningful equity ownership.
- **Perks**: Flexible PTO, free catered meals and snacks, relocation and immigration support.
- **Work environment**: In-office presence in Palo Alto, CA, with a presence in India. The team is small (~11 employees) and technical (25% of staff in technical roles).
- **Leadership**: Founded by Shruti Gupta, a former AI leader at Microsoft and founding security/CISO at Airbnb, Instacart, and Brex. Backed by world-class advisors from Crowdstrike, Airbnb, and Persistent Systems.
- **Growth trajectory**: Rapidly growing with 9 active job postings, 125% YoY increase in job postings, and strong revenue growth signals.

## Sources
1. [zania.ai](https://zania.ai/)
2. [zania.ai/careers](https://zania.ai/careers)
3. [zania.ai/about-us](https://zania.ai/about-us)
4. [linkedin.com/company/zaniaai](https://www.linkedin.com/company/zaniaai)
5. [cbinsights.com](https://www.cbinsights.com/company/zania)

## Other roles at Zania

- [VP of GRC](https://feeny.ai/job/vp-of-grc-zania-palo-alto-57ye98q7cfd0) — Palo Alto, CA
- [VP of Security/GRC Partnerships](https://feeny.ai/job/vp-of-security-grc-partnerships-zania-palo-alto-y284r635m228) — Palo Alto, CA
- [Director of Engineering](https://feeny.ai/job/director-of-engineering-zania-palo-alto-31v8c50rhpjr) — Palo Alto, CA
- [Director of Marketing](https://feeny.ai/job/director-of-marketing-zania-palo-alto-txw3h771kr9y) — Palo Alto, CA
- [Executive Assistant to the CEO](https://feeny.ai/job/executive-assistant-to-the-ceo-zania-palo-alto-hvm71441b8sx) — Palo Alto, CA
- [Founding Enterprise SDR](https://feeny.ai/job/founding-enterprise-sdr-zania-palo-alto-avagb6jpshwp) — Palo Alto, CA
- [Engineering Manager](https://feeny.ai/job/engineering-manager-zania-palo-alto-8n4xxwd00hej) — Palo Alto, CA
- [Growth Marketing Lead](https://feeny.ai/job/growth-marketing-lead-zania-palo-alto-rmnzg5wgajdv) — Palo Alto, CA
- [Staff Software Engineer](https://feeny.ai/job/staff-software-engineer-zania-palo-alto-exkya0ggm5jz) — Palo Alto, CA
- [Head of Engineering](https://feeny.ai/job/head-of-engineering-zania-palo-alto-bpt37pjsyjye) — Palo Alto, CA