Compliance Manager
Join Reflection AI as a Compliance Manager to build and maintain compliance processes across multiple governance pillars.
Posted by employer 3 days ago
First seen on Joblaze 1 day ago
Last verified on the company career page 1 day ago
What you'll build
- Maintain compliance processes and SOPs
- Support security framework compliance posture
- Own day-to-day TPRM operations
- Draft and maintain policies and training materials
- Track regulatory developments
Must have
- 4-7 years in compliance, risk, legal operations
- Direct experience with at least one security framework
- Demonstrated ability to own a problem end to end
- Strong written communication
- Experience working cross-functionally
Nice to have
- Exposure to AI governance
- Experience with GRC or compliance tooling
- Experience responding to customer-facing security questionnaires
- Prior experience in a high-growth or startup environment
Requirements
- Experience
- 4–7 years
- Visa
- Sponsorship available
Not disclosed in this posting: compensation, work arrangement.
Benefits
Joblaze summary
The Compliance Manager at Reflection AI is responsible for developing and maintaining compliance processes across various governance pillars, addressing complex regulatory challenges, and ensuring adherence to security frameworks. This role requires expertise in compliance, risk management, and legal operations, particularly within tech or regulated industries, along with strong communication skills to create clear policies and training materials. Ideal candidates will have 4-7 years of relevant experience and the ability to navigate multiple workstreams effectively. The position is situated within a growing team focused on building foundational compliance structures in a high-growth environ
Joblaze insights
Quick facts
- How much experience is required?
- 4–7 years of relevant experience for this Compliance Manager role.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: CCPA, CMMC, DFARS, EAR, FAR, GDPR.
- Does Reflection AI sponsor work visas for this role?
- Yes — the posting indicates visa sponsorship is available for the right candidate.
- What seniority level is this role?
- Reflection AI targets senior candidates for this position.
- Is this full-time or contract?
- Full-time for this Compliance Manager role at Reflection AI.
From the original posting
Role Overview
Reflection AI's Compliance and AI Governance function spans six pillars: AI Governance, Data Governance, Trade Compliance, Privacy Operationalization, Government Contracting Compliance, and Corporate Compliance. The team builds the policies, controls, and operating rhythms that let the company move fast while staying defensible with regulators, customers, and partners.
We're looking for a senior generalist who can flex across multiple pillars rather than own a single lane. You'll take ambiguous, cross-cutting problems (a new regulation, a customer due-diligence request, an internal process gap) and turn them into working programs: policies, SOPs, training, and monitoring. This role is a force multiplier for the pillar leads and a direct partner to the Head of Compliance and AI Governance.
What You'll Do
Stand up and maintain compliance processes and SOPs across pillars (e.g., insider risk, background checks, external reporting process, vendor/compliance tooling)
Support our security framework compliance posture (SOC 2, ISO 27001, NIST 800-53/800-171, CMMC) by maintaining evidence, coordinating with control owners, and prepping for audits and assessments
Own or support day-to-day TPRM operations: vendor security questionnaires, risk tiering, onboarding reviews, and tracking remediation of vendor findings
Respond to inbound customer and partner security/compliance questionnaires, pulling in subject-matter owners as needed
Partner with pillar leads (AI Governance, Data Governance, Trade Compliance, Privacy, Gov Contracting) to fill gaps, cover surge work, and keep cross-pillar initiatives moving
Draft and maintain policies, process documentation, and training materials for internal and external audiences
Track regulatory developments (AI, data, privacy) and translate them into concrete internal workstreams
Prepare materials for leadership and cross-functional updates (steering committees, exec reporting, knowledge-share sessions)
Identify process gaps and build the scaffolding (trackers, templates, intake forms) to close them
What We're Looking for
4-7 years in compliance, risk, legal operations, or a related GRC function, ideally in tech or a regulated industry
Direct experience with at least one security framework (SOC 2, ISO 27001, NIST) and with TPRM/vendor risk processes (questionnaires, risk tiering, onboarding review)
Demonstrated ability to own a problem end to end with minimal supervision, across unfamiliar subject matter
Strong written communication; comfortable turning ambiguous asks into clear policies and SOPs
Experience working cross-functionally with Legal, Security, Privacy, People, and Engineering stakeholders
Comfortable context-switching across multiple active workstreams
Exposure to AI governance, data privacy (GDPR/CCPA), export controls (ITAR/EAR), or federal contracting compliance (CMMC, FAR/DFARS)
Experience with GRC or compliance tooling (e.g., Vanta or similar platforms)
Experience responding to customer-facing security questionnaires or supporting enterprise sales/procurement cycles
Prior experience in a high-growth or startup environment where the compliance function is still being built
Top-tier compensation: Salary and equity structured to recognize and retain our talent globally.
Standard company text repeated across Reflection AI's postings is omitted here.