We use cookies to run the site and count visits. "Got it" also allows session recording.
RRelay
Raleigh, United States2 months ago
Grade
Senior
Experience
from 5 years
English level
B2, upper-intermediate
An email or a Telegram message to the recruiter
Company: Relay
Location: Relay, Inc / Raleigh, NC
Relay is the Intelligent System of Action for the physical economy. While the digital revolution has often left the deskless workforce behind, we are closing that gap by transforming analog frontline operations into a data-rich, AI-powered ecosystem. We aren't just selling radios, we’re building the digital foundation for the 80% of the global workforce that doesn't work at a desk.
Now, here’s what we’re building, and where you come in.
Relay is hiring a GRC Administrator to own our compliance program end-to-end. Reporting to the Sr. Manager of IT & Security and working closely with the SVP of IT & Security, you will run our active certification portfolio — SOC 2 Type II + HIPAA, ISO 27001:2022, and PCI DSS — and serve as our Drata expert, the GRC platform at the center of everything we do. You'll manage our external auditors directly from within Drata, keeping evidence, controls, and audit workflows moving so certifications land on schedule, every time.
This is an ownership role, not a coordination role. The certification calendar, internal audit program, control library, policy lifecycle, and third-party vendor risk program will all be yours. And because compliance at Relay is a company-wide effort, your success depends on how well you work with department leaders across the entire organization — earning their trust, making their obligations clear and achievable, and holding the line on deadlines and requirements with professionalism and tact. If you can make compliance feel like a shared win rather than a burden, this role is built for you.
You'll join a small, high-leverage IT & Security team responsible for protecting a fast-growing, cloud-first company. We manage a broad technology stack — from identity and device management to SaaS administration and enterprise automation — and we operate as true partners to the business, not just a support function. We move fast, build thoughtfully, and take pride in running a tight, well-integrated environment. We deliberately run a lean internal team amplified by strategic partners and AI-driven tooling, so every member owns real scope, works directly with senior leadership, and sees the impact of their work across the entire organization.
Own Relay's compliance certification portfolio — SOC 2 Type II + HIPAA, ISO 27001:2022, and PCI DSS — including the master certification schedule, audit readiness, and on-time completion of every engagement
Serve as Relay's Drata subject matter expert: administer the platform, maintain control mapping and continuous monitoring, manage evidence collection workflows, and drive adoption across control owners
Manage the relationship with our external auditors directly from within Drata — coordinate audit windows, fieldwork, evidence requests, findings, and remediation through to report issuance
Run the internal audit program: plan and execute control testing, document results, track findings to remediation, and prepare the organization ahead of every external audit
Own control management across all frameworks — maintain the unified control library, assign and support control owners, monitor control health, and remediate gaps and drift
Own the policy management lifecycle — draft, review, update, route for approval, publish, and track attestation of security and compliance policies on their required cadence
Own third-party vendor risk management: security and compliance reviews for new vendors, periodic reassessments, vendor documentation, and risk tracking through to acceptance or remediation
Partner with department leaders across the company to assign compliance responsibilities, communicate requirements in plain language, and hold owners accountable to deadlines with firmness and tact
Support customer trust activities, including security questionnaires, customer audit requests, and maintenance of compliance documentation and the trust center
Report compliance posture, audit status, risks, and program metrics to security leadership and the Security Steering Committee on a regular cadence
Every certification in the portfolio — SOC 2 Type II + HIPAA, ISO 27001:2022, and PCI DSS — is completed on schedule with no lapses and minimal findings
Drata is fully operationalized: controls mapped across frameworks, continuous monitoring healthy, evidence automated wherever possible, and Auditors working seamlessly within the platform
The internal audit program surfaces and closes gaps before external auditors find them
Policies are current, approved, and attested on schedule; the vendor risk program has full coverage of Relay's third parties with no aging reviews
Department leaders view compliance as a well-run partnership — requirements are clear, deadlines are met, and escalations are rare because the relationships are strong
Our culture hinges on Relayers getting LIT up in an environment that fosters Learning, Impact, and Teamwork, where we CHASE the best work of our lives. We call this BWIML (Best Work In My Life).
At Relay, we offer:
The future of frontline work is being built here. Come build it with us. We can’t wait to hear from you.
Company: Relay
Location: Relay, Inc / Raleigh, NC
Relay is the Intelligent System of Action for the physical economy. While the digital revolution has often left the deskless workforce behind, we are closing that gap by transforming analog frontline operations into a data-rich, AI-powered ecosystem. We aren't just selling radios, we’re building the digital foundation for the 80% of the global workforce that doesn't work at a desk.
Now, here’s what we’re building, and where you come in.
Relay is hiring a GRC Administrator to own our compliance program end-to-end. Reporting to the Sr. Manager of IT & Security and working closely with the SVP of IT & Security, you will run our active certification portfolio — SOC 2 Type II + HIPAA, ISO 27001:2022, and PCI DSS — and serve as our Drata expert, the GRC platform at the center of everything we do. You'll manage our external auditors directly from within Drata, keeping evidence, controls, and audit workflows moving so certifications land on schedule, every time.
This is an ownership role, not a coordination role. The certification calendar, internal audit program, control library, policy lifecycle, and third-party vendor risk program will all be yours. And because compliance at Relay is a company-wide effort, your success depends on how well you work with department leaders across the entire organization — earning their trust, making their obligations clear and achievable, and holding the line on deadlines and requirements with professionalism and tact. If you can make compliance feel like a shared win rather than a burden, this role is built for you.
You'll join a small, high-leverage IT & Security team responsible for protecting a fast-growing, cloud-first company. We manage a broad technology stack — from identity and device management to SaaS administration and enterprise automation — and we operate as true partners to the business, not just a support function. We move fast, build thoughtfully, and take pride in running a tight, well-integrated environment. We deliberately run a lean internal team amplified by strategic partners and AI-driven tooling, so every member owns real scope, works directly with senior leadership, and sees the impact of their work across the entire organization.
Relay is proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all team members. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by applicable law.
Our culture hinges on Relayers getting LIT up in an environment that fosters Learning, Impact, and Teamwork, where we CHASE the best work of our lives. We call this BWIML (Best Work In My Life).
At Relay, we offer:
The future of frontline work is being built here. Come build it with us. We can’t wait to hear from you.
We use AI tools to transcribe and summarize interviews for internal hiring purposes. Transcripts are accessible only to authorized hiring personnel and retained consistent with our data retention policies. Candidates who prefer not to have AI notetaking used may request to opt out without impact to your candidacy. For more information, please see our Candidate and Employee Privacy Notice linked here.
We compare skills, grade, work format and salary
Most often 117,000 to 153,000
