SME (GRC & Audit)

Entroid is the enterprise intelligence fabric connecting strategic intent to business outcomes across HR, Finance, Sales and CRM into one governed operating picture. Extended with AI-native application generation and automated application upgrades for enterprise technology teams, without replacing the systems your operations depend on.

This role carries a dual mandate. Internally, you are the Product Owner for your domain module - defining features, owning the roadmap, and collaborating with engineering to build a product grounded in real enterprise practice. Externally, you are the Product Champion - guiding enterprise customers through deployment and helping them configure the platform to their specific context. You do not need to be a software developer. You must be digitally fluent, comfortable with enterprise software ecosystems, and genuinely curious about how AI and automation are reshaping your domain.

• ·Define and own the GRC & Audit module roadmap - covering enterprise risk management, controls management, compliance framework management, policy management, and internal and external audit lifecycle
• ·Ensure the module supports major compliance frameworks (ISO 31000, COSO, SOX, GDPR, ISO 27001, and industry-specific regulations) in a configurable, non-prescriptive way
• ·Define AI capabilities: risk signal detection, control effectiveness prediction, audit issue pattern analysis, continuous controls monitoring, and AI-assisted audit planning
• ·Benchmark against leading GRC platforms (ServiceNow GRC, MetricStream, Archer, LogicGate) and define differentiation - particularly how GRC integrates across operations, finance, and HR modules
• ·Own the GRC feature backlog and write functional specifications for engineering teams

• ·Lead GRC and audit module deployments at enterprise customers - mapping risk taxonomies, controls frameworks, compliance obligations, and audit processes to the platform
• ·Engage with CROs, Chief Compliance Officers, heads of Internal Audit, and enterprise risk committees during adoption
• ·Translate regulatory and audit-specific customer configurations into reusable platform patterns

• ·10+ years in enterprise risk management, GRC, compliance, or internal and external audit at a large enterprise or professional services firm (Big 4 or equivalent)
• ·Deep expertise in risk frameworks (COSO, ISO 31000), compliance management, controls design, and audit methodologies
• ·Hands-on experience with GRC platforms - Archer, MetricStream, ServiceNow GRC, or equivalent
• ·Working knowledge of AI in GRC: continuous controls monitoring, risk signal aggregation, audit analytics
• ·Ability to engage with board-level risk committees, audit committees, CROs, and compliance leadership

• ·Professional qualification: CA, CIA, CISA, CRISC, or equivalent
• ·Exposure to regulatory technology (RegTech) products
• ·Experience in ESG and sustainability risk management and reporting

You will work at the intersection of deep domain expertise and a platform built for regulated operations, shaping a product from the ground up, seeing it deployed with enterprise customers, and building expertise in AI-augmented enterprise software. We offer a collaborative, technically ambitious environment where domain depth is valued as highly as technical skill.