sully-ai - GRC Specialist

• Mastery of security and compliance frameworks, with expertise in identifying and mitigating security risks. • Strong analytical and problem-solving skills, with the ability to find and resolve problems without needing direction. • Experience in building and executing Third Party Risk Management programs, ensuring compliance with security requirements. • Strong ability to operate independently in ambiguity, execute decisively, and be self-driven and highly motivated. • Experience in working with cloud-based security platforms, with a focus on building and executing security and compliance programs. • KEY RESULTS (FIRST 90 DAYS) • Identify Security and Compliance items that could potentially block customer acquisition. • Resolve Security and Compliance risks to company objectives. • Build out a full Third Party Risk Management program leveraging in-place solutions. Add all current vendors to this platform. • Get all user devices fully compliant with security requirements. • Create a clear plan forward for contractor virtual environments. • Ensure Security and Compliance does not block other teams from being able to serve clients. • Entrepreneurial to your core: You think in outcomes, thrive in chaos, and take ownership without limits • Mission-obsessed: You’re here to save lives, not just ship features — patients and doctors are your why. • Impact-driven & fast-moving: You sprint toward hard problems and ship with sharp judgment. • Elite teammate: You raise the bar through high standards, direct feedback, and craft excellence.