Risk and Compliance Officer

Role

Risk and Compliance Officer at Superside to help shape and implement the risk and compliance systems and processes needed to take Superside to the next level. As part of a small legal and compliance team, and reporting directly to the Senior Risk and Compliance Manager, you will receive personalized mentorship and guidance. This role requires someone who is independently driven and prepared to roll up their sleeves and take responsibility for building scalable compliance processes, driving risk initiatives across the business, and helping Superside meet the evolving demands of global AI and security regulations.

What you’ll do

• Help design and implement systems and processes that enable Superside to scale responsibly as a global leader in AI-powered creative services.
• Ensure compliance with AI-related regulations (e.g., EU AI Act) by collaborating with Product, Legal, and Marketing to embed governance across AI initiatives.
• Support external audits (e.g., SOC 2) by coordinating with external auditors, gathering evidence, and ensuring timely fulfillment of annual security requirements.
• Collaborate with the sales team to respond to customers’ and prospects’ security and risk questionnaires.
• Collaborate with the Legal team to review and redline customer agreements, with a focus on data privacy, AI governance, and security terms.
• Evaluate and approve new vendors by conducting security and risk assessments during onboarding and throughout the vendor lifecycle.
• Maintain and regularly update risk registers across departments. Work cross-functionally to monitor corrective actions for identified risks, ensuring continuous improvement and accountability.
• Respond to a wide variety of risk, compliance, AI use, and security questions that arise from across the business in day-to-day operations.
• Develop systems and processes to improve the risk and compliance function.

What you’ll need to succeed

• Bachelors in Computer Science, Management Information Systems, Risk Management, Engineering, or related fields from a top university.
• Minimum 5-8 years’ work experience in risk, compliance, or GRC roles, ideally with a mix of professional firm experience and in-house in a SaaS, tech, or AI-driven organization.
• Strong knowledge of security frameworks and data privacy regulations such as SOC 2 and GDPR.
• Experience supporting or managing external audits, including evidence collection and control validation.
• Strong working knowledge and experience with AI/ML concepts, risks, and the emerging regulatory landscape (e.g., EU AI Act).
• Familiarity with vendor risk management, including onboarding, security due diligence, and ongoing evaluations.
• Ability to translate complex technical requirements into clear, actionable guidance for cross-functional teams.
• A team spirit allowing you to work well under pressure while maintaining kindness and compassion and a sense of the bigger picture
• A growth mindset with a strong internal drive to perform at a high level, and prepared to run with matters without significant oversight or day-to-day management
• Strong business acumen with a desire to understand the impact that your work has on the business and ability to act accordingly
• Excellent verbal and written English language proficiency.

About Superside

Superside is the leading AI-powered creative company that quickly and cost-effectively enhances in-house functions. We help over 500 ambitious brands get great creative concepts done at scale. Built to be an extension of in-house teams, we unbottleneck marketing and creative teams so they can move faster and drive more reliable creative performance. Superside is a fully remote company with over 700 team members working across 60+ countries and 13 timezones. Learn more at superside.com

Diversity, Equity and Inclusion

We’re an equal-opportunity company. All applicants will be considered regardless of ethnicity, appearance, religion, gender identity, sexual orientation, national origin, veteran or disability status.