Cambridge, Massachusetts, United States · On-site
$220k–$260k/yr
About Blitzy Blitzy is a Cambridge, MA based AI software development platform on a mission to revolutionize the software development life cycle by autonomously building custom software to unlock the next industrial revol…
Skills: GRC, SOC 2 Type II, ISO 27001:2022, Vanta, FedRAMP
Cambridge, Massachusetts, United States · On-site
$149k–$215k/yr
Job Title: Associate Director, Market Research Location: Cambridge, MA About the job Ready to push the limits of what’s possible? Join Sanofi in one of our corporate functions and you can play a vital part in the perform…
Skills: Market Research, Quantitative Analysis, Qualitative Research, Project Management, Strategic Thinking
Cambridge, Massachusetts, United States · On-site
$100k–$275k/yr
Overview: Draper is an independent, nonprofit research and development company headquartered in Cambridge, MA. The 2,000+ employees of Draper tackle important national challenges with a promise of delivering successful a…
Skills: Offensive Cybersecurity, Cyber Software Development, Vulnerability Assessment, Exploit Development, Hardware Security
Cambridge, Massachusetts, United States · On-site
$37/hr–$95/hr
When you join the growing BILH team, you're not just taking a job, you’re making a difference in people’s lives. Reporting to the unit’s Nurse Manager, the Registered Nurse works collaboratively with members of the Care …
Skills: Patient Assessment, Care Planning, Patient Advocacy, Clinical Decision Making, Patient Education
Cambridge, Massachusetts, United States · On-site
$121k–$202k/yr
Business Introduction At GSK, we have bold ambitions for patients, aiming to positively impact the health of 2.5 billion people by the end of the decade. Our R&D focuses on discovering and delivering vaccines and medicin…
Skills: Analytical Chemistry, Data Analysis, Design Thinking, Drug Design, Drug Discovery Process
Cambridge, Massachusetts, United States · On-site
$37/hr–$95/hr
When you join the growing BILH team, you're not just taking a job, you’re making a difference in people’s lives. About Our Lactation Services Mt. Auburn Hospital is committed to supporting families throughout their infan…
Skills: Lactation Consulting, Nursing Care, Patient Assessment, Patient Education, Discharge Planning
Cambridge, Massachusetts, United States · Hybrid
$122k–$177k/yr
Job title: US Senior Product Manager, Respiratory Marketing Location: Cambridge, MA About the Role Sanofi is seeking a highly strategic and execution-oriented Senior Product Manager to join the US Respiratory Marketing t…
Skills: Product Management, Integrated Marketing Strategy, Omnichannel Marketing, Cross-functional Collaboration, Agency Management
Cambridge, Massachusetts, United States · On-site
About Us Language Trainers is an international language training company working with freelance teachers of 99+ languages in hundreds of cities worldwide. Founded in 2004, our motto is Any Language, Anytime, Anywhere. We…
Skills: Portuguese Language Teaching, Business Portuguese, Translation, Interpretation, One-to-one Instruction
Cambridge, Massachusetts, United States · Hybrid
$125k–$198k/yr
Job TitleCompliance Program Manager (Operations and Investigations) Job Description Compliance Program Manager (Operations and Investigations): The Compliance Program Manager supports the Corporate Compliance Program by …
Skills: Compliance Auditing, Contract Review, SAP ERP, MS Access, Excel
Cambridge, Massachusetts, United States · On-site
$137k–$215k/yr
By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda’s Privacy Notice an…
Skills: Microsoft Intune, SCCM/MEMCM, PowerShell, Application Packaging, CIS Benchmarks
Cambridge, Massachusetts, United States · Hybrid
$155k–$162k/yr
Company Description AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable imp…
Skills: Data Loss Prevention (DLP), Insider Risk Management, Splunk, Data Classification, Network Security
Cambridge, Massachusetts, United States · On-site
$96k–$127k/yr
Company Summary: Serif Biomedicines is a privately held, early-stage biotechnology company pioneering Modified DNA as a new class of medicines. Modified DNA brings together the best features of mRNA and gene therapy, whi…
Skills: Multi-color Flow Cytometry, Cytotoxicity Assays, Tissue Processing, Primary Immune Cell Culture, Immunoassay Development
Cambridge, Massachusetts, United States · Hybrid
$172k–$281k/yr
Flagship Pioneering is a scientific innovation engine that invents and builds companies that change the world. We bring together the greatest scientific minds with entrepreneurial company builders and assemble the capita…
Skills: Organizational Development, Talent Management, Change Management, Leadership Development, Succession Planning
Cambridge, Massachusetts, United States · Hybrid
Company Description By working at Harvard University, you join a vibrant community that advances Harvard's world-changing mission in meaningful ways, inspires innovation and collaboration, and builds skills and expertise…
Skills: Fundraising Strategy, Major Gifts, Capital Campaign Management, Donor Stewardship, Institutional Giving
Cambridge, Massachusetts, United States · Hybrid
Company Description By working at Harvard University, you join a vibrant community that advances Harvard's world-changing mission in meaningful ways, inspires innovation and collaboration, and builds skills and expertise…
Skills: Fundraising, Board Management, Prospect Research, Grant Writing, Event Management
Cambridge, Massachusetts, United States · Hybrid
Company Description By working at Harvard University, you join a vibrant community that advances Harvard's world-changing mission in meaningful ways, inspires innovation and collaboration, and builds skills and expertise…
Skills: Strategic Leadership, Event Planning, Staff Management, Project Management, Relationship Management
Cambridge, Massachusetts, United States · Hybrid
Company Description By working at Harvard University, you join a vibrant community that advances Harvard's world-changing mission in meaningful ways, inspires innovation and collaboration, and builds skills and expertise…
Skills: Major Gift Fundraising, Team Management, Strategic Planning, Donor Engagement, Portfolio Management
Cambridge, Massachusetts, United States · Hybrid
Company Description By working at Harvard University, you join a vibrant community that advances Harvard's world-changing mission in meaningful ways, inspires innovation and collaboration, and builds skills and expertise…
Skills: Major Gift Fundraising, Team Management, Strategic Planning, Donor Engagement, Portfolio Management
Cambridge, Massachusetts, United States · Hybrid
Company Description By working at Harvard University, you join a vibrant community that advances Harvard's world-changing mission in meaningful ways, inspires innovation and collaboration, and builds skills and expertise…
Skills: Frontline Fundraising, Prospect Management, Donor Stewardship, Relationship Management, Strategic Planning
Cambridge, Massachusetts, United States · Hybrid
Company Description By working at Harvard University, you join a vibrant community that advances Harvard's world-changing mission in meaningful ways, inspires innovation and collaboration, and builds skills and expertise…
Skills: Fundraising, Volunteer Management, Prospect Management, Donor Stewardship, Strategic Planning
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Own and operate a proactive compliance program, managing SOC 2 and ISO 27001 cycles as the primary system-of-record owner. Directly manage auditor relationships and build scalable compliance processes to reduce engineering interrupt load.
Requires hands-on experience leading full SOC 2 Type II or ISO 27001 audit cycles and proficiency with GRC platforms like Vanta. Candidates must demonstrate the ability to manage vendor relationships independently and handle complex frameworks.
Blitzy is a Cambridge, MA based AI software development platform on a mission to revolutionize the software development life cycle by autonomously building custom software to unlock the next industrial revolution. We're transforming how enterprises build software, turning enterprise requirements into production-ready code with an agentic software development platform that can autonomously execute 80% of the quantum of software development work. We're backed by multiple tier 1 investors, and have proven success as founders of previous start-ups.
Location: 1 Kendall Square, Cambridge, MA (On-site)
Compensation: $220,000 - $260,000 plus bonus and equity, commensurate with experience
Security and compliance at Blitzy currently run on a patchwork: a Security Delegate managing our frameworks with help from an external compliance vendor, backend engineers pulled off their real jobs to answer security questions, and audit evidence assembled after the fact instead of built in from the start.
We're hiring one person to fix that. As Head of GRC, you'll own a compliance program that's audit-ready by design, not by scramble.
To be clear about scope, this role is not:
A paperwork-only compliance role with no rigor.
A job where you escalate every auditor question to engineering or to the Security Delegate.
A way to move our current reactive compliance model in-house unchanged — the point is to make it proactive.
You spot the gap — like SSO being “available” but not “enforced” — before an auditor finds it, not after.
You've personally run a SOC 2 Type II or ISO 27001:2022 cycle and know exactly what auditors sample.
You own Vanta (or an equivalent GRC platform) as the single source of truth, not a reference tool.
You manage auditors and compliance partners directly, without needing anyone to run interference for you.
Engineers stop getting pulled into compliance busywork because you've taken security scope questions and screenshot requests off their plate.
You write clearly — policies, audit narratives, and questionnaire responses that hold up under scrutiny.
Own Vanta (or equivalent) as the system of record — configuring tests and keeping evidence current, not just checking a dashboard.
Run SOC 2 Type II and ISO 27001:2022 compliance building continuously toward what auditors actually sample, rather than scrambling before the audit window opens.
Manage auditor and partner relationships directly, including firms like Insight Assurance and FedRAMP platform partners such as Second Front Systems/Game Warden — without routing every conversation through the Security Delegate.
Build the compliance processes that don't exist yet, starting with a formal sub-processor change communication process, which is already coming up as a contractual requirement in enterprise deals.
Evaluate evidence critically rather than take it at face value, confirming, for example, that SSO is enforced via admin panel configuration — not just available in a settings screen.
Personal, hands-on ownership of at least one full SOC 2 Type II or ISO 27001:2022 audit cycle — not just adjacent to one.
Direct experience running a GRC/compliance platform (Vanta or equivalent) as the system-of-record owner.
A track record of managing vendor and auditor relationships independently, without hand-holding.
The seniority and judgment to reduce engineering interrupt load, not add to it — engineers should be comfortable handing things off to you, not double-checking your work.
FedRAMP exposure, even at Moderate — we're targeting FedRAMP High.
A track record of building a compliance process from scratch, not just running an existing playbook.
Experience managing multiple frameworks concurrently — SOC 2, ISO 27001, and GDPR at the same time.
Familiarity with Google Workspace as an identity provider.
GDPR/data privacy program experience — cookie consent, Article 27 representative coordination, DPA review.
You'll have direct ownership of a function that's currently split across engineering, a Security Delegate, and an external vendor — with full autonomy to build it right from day one. That includes a seat at the table on FedRAMP, one of the most demanding compliance programs a company can pursue.
Our interview process reflects the role itself: an audit walkthrough round where you'll talk through a real SOC 2 or ISO 27001 cycle you've run and how you handled your findings.
Led by two pioneering co-founders we are one of the fastest growing companies in the U.S., creating our own category of enterprise autonomous software development. We automate thousands of hours of software development for our customers, which includes strong representation within the Fortune 500.
We move Blitzy Fast: Time is both our company's and our clients' most precious asset. We move quickly and decisively to innovate internally and deliver exceptional software externally.
Championship Mindset: We operate like a professional sports team. We win as a team by holding ourselves and each other to high standards, collaborating in-person, and remaining focused on the mission.
Passion for Invention: We're pushing the frontier of what's possible, requiring constant innovation and iteration.
We Work for the Customer: We focus on delivering outsized value to the customers we work with and expanding those relationships into deep, meaningful partnerships.
We believe in being 'everyday athletes'—taking care of ourselves so we can bring our best minds to work. We promote great sleep, movement, and restorative activities for optimal mental performance. It makes for a happier and more productive team.
Blitzy is an equal opportunity employer committed to building a diverse and inclusive team. We believe different perspectives make us stronger.
The first autonomous software development platform with infinite code context, purpose built for the enterprise.
Meet Blitzy, the only autonomous code generation platform with infinite code context, purpose built for large, complex enterprise-scale codebases. While other AI coding tools provide snippets of code and struggle with context, Blitzy ingests millions of lines of code and orchestrates thousands of agents that reason for hours to map every line-level dependency. With a complete contextual understanding of your codebase, Blitzy is ready to be deployed at the beginning of every sprint, creating a bespoke agent plan, then autonomously generating enterprise-grade, premium quality code, grounded in a deep understanding of your existing codebase, services, and standards. Blitzy’s orchestration layer of cooperative agents thinks for hours to days, autonomously planning, building, improving, and validating code. It executes spec and test driven development, done at the speed of compute. The platform completes more than 80% of the work autonomously, typically weeks to months of work, while providing a clear action plan for the remaining human development. Used for both large scale feature additions and modernization work, Blitzy is the secret weapon for Fortune 500 companies globally, unlocking 5x engineering velocity and delivering months of engineering work in a matter of days. Blitzy was co-founded by Brian Elliott, a serial entrepreneur, and Sid Pardeshi, an ex-NVIDIA software architect with 27 Generative AI patents to his name.
Offices: Boston, Massachusetts 02215, US · 1 Kendall Sq, Floor 2, Cambridge, Massachusetts 02139, US
