Born in Y Combinator (S23) and backed by a16z and Base10 with over $60M raised, we power critical operations for integral enterprises worldwide.
Our platform is battle-tested in the most demanding environments - where AI has real consequences. We started in logistics, built our own voice stack, models, and orchestration layer from the ground up, and are now bringing that infrastructure to every enterprise that runs the real economy. Your mission is to scale our compliance frameworks and ensure we maintain a “"continuously audit-ready"” state. you will be working with engineers to automate evidence and ensure our security controls are robust and well-documented.
Framework Management: Maintain and improve our compliance posture for SOC 2 Type II and ISO 27001 . Vanta, Drata) to automate evidence collection and monitor control health in real-time.
1–3 years of experience in GRC, IT Audit, or Security Compliance.
~ Ability to understand technical security controls (encryption, IAM, CI/CD, cloud logs) and explain them to non-technical stakeholders.
~ Exceptional written and verbal communication in English. Basic understanding of cloud infrastructure (AWS/GCP).
Ownership & Autonomy - Take full ownership of projects and ship fast.
No excuses,



no blame-shifting — if something needs fixing, we own it and make it better. Putting care and intention into every task, striving for excellence, and taking deep ownership of the quality and outcome of your work. exceptional performance is the passing grade.’ The personal data provided in your application and during the selection process will be processed by Happyrobot, Inc., acting as Data Controller.
By sending us your CV, you consent to the processing of your personal data for the purpose of evaluating and selecting you as a candidate for the position. Your personal data will be treated confidentially and will only be used for the recruitment process of the selected job offer.
In relation to the period of conservation of your personal data, these will be eliminated after three months of inactivity in compliance with the GDPR and legislation on the protection of personal data.
If you wish to exercise your rights of access, rectification, deletion, portability or opposition in relation to your personal data, you can do so through submitting your request, you confirm that you have read and understood this clause and that you agree to the processing of your personal data as described.
#

📌 GRC Compliance Specialist (España)
🏢 Happyrobot
📍 España