ZenGRC

We started in San Francisco, CA in 2009 and currently have 51-200 employees. We develop GRC (Governance, Risk, and Compliance) software to help organizations manage cyber risk as a business issue, not just an IT problem. Our goal is to make risk management more strategic, helping security executives explain risk in business terms for board decisions.

Our platform automates compliance and risk management. It includes AI, a Trust Center, and supports the Secure Controls Framework (SCF) and other regulatory frameworks like ISO, SOC, HIPAA, PCI, CCPA, NIST, and COBIT. GRACI, our AI component, functions as an intelligent assistant. It handles tasks an analyst would, such as scoping new programs, advising on objectives, designing controls, and creating audit structures. GRACI runs securely on isolated instances on AWS Bedrock. It’s trained only on customer data and doesn’t keep information between sessions.

The platform provides a single solution for third-party risk management, vendor management, and risk scoring. We designed it for easy use with automation, data visualizations, and dashboards. It’s customizable and scales to match an organization’s risk posture and scoring needs, allowing external auditors limited system access. We offer all our key features with simple, all-inclusive pricing. In 2024, ISACA gave us their Global Innovation Award, and G2 has recognized our performance.

Our mission is to provide a single, flexible, and complete GRC tool. We want it to support organizations no matter where they are in their GRC journey, offering features and ease of use that can grow with their needs.

Our core values include innovation (constantly improving and adapting our solutions to client needs), simplicity (making GRC processes straightforward), integrity (building trust through transparency and ethical practices), and customer-centricity (prioritizing our clients’ success).

We are a team of collaborators and problem-solvers, with members spanning from San Francisco to Slovenia. We have a “Yes, and …” culture that encourages employees to build on ideas, which helps us share creativity and innovate.

This culture is supported by principles of ownership (where employees are empowered to shape their roles), optimism (seeing challenges as opportunities and learning from new projects), and openness (characterized by collaborative teams, accessible leadership, curiosity, and a receptiveness to original ideas).

We offer flexible schedules and a remote-first work environment.

For our US employees, we offer:

• Unlimited PTO
• 13 paid holidays
• Stock options
• Flexible working hours
• A remote-first policy
• A 401k match up to 3%
• Health, dental, and vision plans

For our employees in Latin America, we offer:

• 20 paid days off
• Stock options
• Flexible working hours
• The option to work from home or anywhere
• Salary in USD