Compliance Analyst, Trust & Infrastructure at Brain Corp

Job description

Brain Corp is a San Diego, California, USA-based AI company creating transformative core technology for the robotics industry. Our purpose is to create autonomous technology that helps the real world work better. Brain's robotic and AI solutions help retailers ensure that the right product is on the right shelf at the right price, in a clean environment. Through the BrainOS® Robotics Platform, which powers the largest global fleet of the Autonomous Mobile Robots (AMRs) in operation in commercial public spaces, Brain Corp delivers insightful and efficient automated solutions in both commercial floor cleaning and inventory management, empowering organizations and their employees to achieve more. Brain Corp currently powers more than 30,000 AMRs, representing the largest fleet of its kind in the world. Brain Corp is funded by the SoftBank Vision Fund, Clearbridge, and Qualcomm Ventures. Named a top workplace by the San Diego Union Tribune and USA today in 2025, we make life-changing impacts through innovation, helping workers globally unlock their abilities in orchestration with intelligent machines. Position Summary: BrainCorp is seeking a Compliance Analyst, Trust & Infrastructure to join our Operations team. In this role, you will sit at the intersection of enterprise security, compliance framework operations, and internal business systems infrastructure. You will own our GRC operations—specifically anchoring our SOC 1/SOC 2, privacy, and continuous control monitoring programs—while serving as the primary project management coordinator for our core business systems. Your mission is to maintain a robust, audit-ready compliance posture, accelerate enterprise sales through trust enablement, and manage the cross-functional project lifecycles required to keep our business systems scaleable, secure, and aligned with technical capacity. You will be the primary coordinator responsible for bridging the gap between our commercial teams (Product, Sales, Marketing, Customer Success), internal Corporate Service teams (Accounting, Legal, Finance, Supply Chain) and our technical execution teams (Engineering, Operations, and External Vendors). You will own the delivery of high priority, cross-functional projects that support the growth trajectory, increased scale, and efficiency we are seeking. You will be organizing the coordination loops and the documentation necessary to ensure our project resourcing and available capacity provide a "shared reality" for the leadership team. Essential Job Functions: Trust Operations & Audit Readiness Serve as the primary driver for successful SOC 1, SOC 2, and privacy audits by continuously gathering infrastructure control evidence, mapping technical workflows, and minimizing audit friction. Manage the ‘to-do’ list of internal controls that must be formed on a regular cadence for the company’s various Trust programs (Security, Privacy, Safety). Directly administer our compliance automation and trust platforms (e.g., Vanta) to track internal controls, manage the project tracking log, and systematically remediate discovered infrastructure risks. Author and maintain foundational IT security, access management, and data privacy policy suites, transforming complex technical frameworks into actionable internal operational procedures. Infrastructure Change Control & Project Management Oversee the infrastructure deployment calendar, ensuring all modifications to core business systems adhere to strict change management protocols, access controls, and IT General Controls (ITGC). Facilitate scoping sessions with technical and business stakeholders to map infrastructure dependencies, capture data architecture requirements, and define resource needs for business system updates. Maintain a centralized "source of truth" project roadmap for the Operations team to sequence infrastructure initiatives, track capacity bottlenecks, and manage vendor delivery lifecycles. Coordinate user acceptance testing (UAT) and system validation procedures. Draft clear "Internal Release Notes" that translate technical infrastructure shifts into clear impact summaries for cross-functional leadership. Support the facilitation of bi-weekly calibration meetings where leadership makes trade-offs on project sequencing. Distill complex project data into simple, executive-level updates for operations leadership, and create lightweight training materials and "cheat sheets" to ensure high adoption rates of new features and workflows. Strategic Operations & Compliance Support Maintain a centralized inventory of all Business Systems and compliance vendors, regularly auditing utilization rates and system integrations to identify overlap and eliminate platform sprawl. Act as the primary operational gatekeeper for the onboarding and offboarding provisioning lifecycle, ensuring all external vendors requesting access to core systems strictly adhere to established Trust and ITGC protocols. Assist leadership in mapping the operational workflows and system requirements necessary to scale business systems for upcoming channel expansions, ensuring infrastructure automation can handle increased capacity without increasing administrative friction. Design and deliver lightweight, internal training sessions to upskill teams on basic control requirements, championing a culture of "Safety & Privacy by Design" at the contributor level. Direct Project Ownership: Lead and complete independent projects or ad hoc assignments as directed by leadership, moving beyond a facilitation role to ensure direct delivery of business outcomes. Education and/or Work Experience Requirements: 4+ years in Project Management, Business Systems Analysis, Compliance, and/or Operations, with proven exposure to SOC 1, SOC 2, or ITGC frameworks—preferably in a hardware/software hybrid environment. Direct, hands-on administrative experience utilizing compliance automation and trust management platforms (e.g., Vanta, SafeBase, or equivalent). High proficiency in ERP and CRM business processes, with a strong understanding of their objects, workflows, and limitations without needing to be a dedicated administrator. Required Knowledge, Skills, Abilities, and Other Characteristics: Strong structural understanding of ERP, CRM, and billing systems infrastructure, specifically regarding data flows, identity and access management (IAM), user lifecycles, and environment separation. A "roll-up-your-sleeves" mentality with the ability to pivot from a coordinator to an individual contributor, completing tasks or projects independently when necessary to meet company goals. Proven ability to manage external vendors and developers through a project lifecycle. Exceptional ability to navigate a matrixed organization and manage conflicting priorities through data and neutral arbitration. Things that make a difference: A knack for taking "technical-speak" and translating it into plain English for busy department heads to make the complex feel simple. A strong advocacy for simple, effective workflows over overly complex ones, believing that a well-organized, accessible tool is far more valuable than an underutilized system. The ability to visualize a business process from end-to-end (e.g., in Figma) to eliminate inefficiencies and bottlenecks before solutions are engineered. A proactive approach to ensuring critical privacy, security, or safety features remain highly visible on roadmaps, treating trust as a core product feature. Exceptional organization that keeps our evidence and controls so well-maintained that an audit feels like a non-event. The ability to politely but persistently follow up with stakeholders to ensure critical projects progress, serving as the "friendly nudge" that keeps the engine running. A natural curiosity and professional maturity, with an explicit interest in being mentored to take on broader departmental strategy, architectural planning, and leadership responsibilities over time. A genuine curiosity about how establishing trust, maintaining compliance, and adhering to security frameworks apply to cloud environments, AI governance tools, and autonomous machines operating in public spaces. Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Essential functions may require maintaining the physical condition necessary for sitting, walking or standing for periods of time; operating a computer and keyboard; use of hands to finger and grasp; talk and hear at normal room levels; visual acuity to determine the accuracy, neatness, and thoroughness of the work assigned or to make general observations of facilities or structures; push or pull up to 20 pounds. Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. The noise level in the work environment is usually quiet to moderate. Employees are exposed to the typical office environment with computers, printers and telephones. Salary Range: The anticipated salary range for candidates who will work in San Diego, California is $105,257 to $136,215. The final salary offered to a successful candidate will be dependent on several factors that may include but are not limited to the type and length of experience within the job, type and length of experience within the industry, education, etc. Brain Corp is a multi-state employer and this salary range may not reflect positions that work in other states. In addition to base pay, our competitive total rewards package consists of: A discretionary annual target bonus Stock options 401(k) plan with match (no waiting period and immediate vesting) Comprehensive suite of insurance benefits for employees (and their families) to include a variety of medical plan options (including an HSA with employer contribution), dental, vision, life and disability insurance, Employee Assistance Program (EAP), Legal/Identity support plans, pet insurance. Access to Flexible Spending Accounts (Medical and Dependent Care) Generous paid time off including flexible vacation, Paid Sick Leave, time off for volunteering in the community, 10 paid company holidays, and a winter company shutdown Additional Perks include: Daily on-site lunch available in the San Diego office On-campus gym including pool and tennis courts in the San Diego office Opportunities to connect with colleagues including monthly game nights, hikes, wellness challenges, and community events Internal continuous learning events Opportunities to share your own interests and hobbies with the Company

Requirements

Must-haves

Named a top workplace by the San Diego Union Tribune and USA today in 2025, we make life-changing impacts through innovation, helping workers globally unlock their abilities in orchestration with intelligent machines.
Trust Operations & Audit Readiness
Serve as the primary driver for successful SOC 1, SOC 2, and privacy audits by continuously gathering infrastructure control evidence, mapping technical workflows, and minimizing audit friction.
Manage the ‘to-do’ list of internal controls that must be formed on a regular cadence for the company’s various Trust programs (Security, Privacy, Safety).
Directly administer our compliance automation and trust platforms (e.g., Vanta) to track internal controls, manage the project tracking log, and systematically remediate discovered infrastructure risks.
Author and maintain foundational IT security, access management, and data privacy policy suites, transforming complex technical frameworks into actionable internal operational procedures.
Infrastructure Change Control & Project Management
Oversee the infrastructure deployment calendar, ensuring all modifications to core business systems adhere to strict change management protocols, access controls, and IT General Controls (ITGC).
Facilitate scoping sessions with technical and business stakeholders to map infrastructure dependencies, capture data architecture requirements, and define resource needs for business system updates.
Maintain a centralized "source of truth" project roadmap for the Operations team to sequence infrastructure initiatives, track capacity bottlenecks, and manage vendor delivery lifecycles.
Coordinate user acceptance testing (UAT) and system validation procedures. Draft clear "Internal Release Notes" that translate technical infrastructure shifts into clear impact summaries for cross-functional leadership.
Support the facilitation of bi-weekly calibration meetings where leadership makes trade-offs on project sequencing.
Distill complex project data into simple, executive-level updates for operations leadership, and create lightweight training materials and "cheat sheets" to ensure high adoption rates of new features and workflows.
Strategic Operations & Compliance Support
Maintain a centralized inventory of all Business Systems and compliance vendors, regularly auditing utilization rates and system integrations to identify overlap and eliminate platform sprawl.
Design and deliver lightweight, internal training sessions to upskill teams on basic control requirements, championing a culture of "Safety & Privacy by Design" at the contributor level.
Lead and complete independent projects or ad hoc assignments as directed by leadership, moving beyond a facilitation role to ensure direct delivery of business outcomes.
4+ years in Project Management, Business Systems Analysis, Compliance, and/or Operations, with proven exposure to SOC 1, SOC 2, or ITGC frameworks—preferably in a hardware/software hybrid environment.
Direct, hands-on administrative experience utilizing compliance automation and trust management platforms (e.g., Vanta, SafeBase, or equivalent).
High proficiency in ERP and CRM business processes, with a strong understanding of their objects, workflows, and limitations without needing to be a dedicated administrator.
Required Knowledge, Skills, Abilities, and Other Characteristics:
Strong structural understanding of ERP, CRM, and billing systems infrastructure, specifically regarding data flows, identity and access management (IAM), user lifecycles, and environment separation.
A "roll-up-your-sleeves" mentality with the ability to pivot from a coordinator to an individual contributor, completing tasks or projects independently when necessary to meet company goals.

Nice-to-haves

A discretionary annual target bonus

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aifigma

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Wellness