Governance, Risk & Business Operations Lead

Governance, Risk & Business Operations Lead

About Veevart

Veevart is a fast-growing SaaS company built on Salesforce, helping museums and cultural institutions across the world modernize their operations through technology. We serve more than 150 museums in 18 countries and continue to scale rapidly.

We're looking for someone excited about building from scratch—not simply maintaining existing programs. This is a unique opportunity to establish Veevart's Governance, Risk & Compliance (GRC) function while laying the foundation for a long-term Business Excellence practice that leverages data, automation, and AI to improve operational performance across the organization.

About the Role

At Veevart, we're building our Governance, Risk & Compliance (GRC) function from the ground up—and we're looking for someone excited to grow with it. As our Governance, Risk & Business Operations Lead, you'll be responsible for establishing and maintaining our Information Security Management System (ISMS), coordinating internal audits, supporting certification efforts, and helping build the governance processes that will strengthen the organization as we scale.

This is a hands-on role for someone early in their career who is eager to take ownership, learn quickly, and make a meaningful impact. Beyond compliance, you'll have the opportunity to shape how we measure and improve the business by leveraging data, automation, and AI to optimize processes, monitor performance, and support better decision-making across the organization.

What You'll Do

• Support the design, implementation, and continuous improvement of Veevart's Governance, Risk & Compliance (GRC) framework and Information Security Management System (ISMS).
• Conduct risk assessments, maintain the risk register, and track mitigation plans through completion.
• Execute internal control reviews, support audit activities, and maintain audit-ready documentation and evidence.
• Develop and maintain information security, privacy, and governance policies in collaboration with cross-functional teams.
• Monitor third-party risk and support vendor security and compliance assessments.
• Build dashboards, KPIs, and reports that provide actionable insights into compliance, operational performance, and business efficiency.
• Leverage AI and automation to streamline governance processes, improve monitoring, and optimize operational workflows.
• Promote a culture of security, compliance, and continuous improvement through training, data-driven recommendations, and cross-functional collaboration.

What We're Looking For

Education

• Degree in Systems Engineering, Software Engineering, Industrial Engineering, Business Administration, Economics, Cybersecurity, Statistics and mathematics or related fields.

Experience

• 2+ years of professional experience in Governance, Risk & Compliance (GRC), IT Risk, Information Security, Internal Audit, ISMS, Data Analytics, Business Analytics, or a related analytical role.

Key Competencies

• Professional working proficiency in English (B2 or higher).
• Strong analytical and problem-solving skills, with the ability to transform data into actionable insights and support data-driven decision-making.Strategic thinking
• Ability to communicate complex risk and compliance topics clearly and persuasively to senior leadership — from Managers and Directors to the COO and CEO
• Familiarity with Artificial Intelligence and the use of agents to automate and modernize monitoring, controls, and evidence management.

Certifications (Nice to Have)

All certifications below are a plus.

• ISO 27001 Lead Implementer / Lead Auditor (priority) — ability to implement and audit the ISMS
• CISM (Certified Information Security Manager) — strategic and governance focus; anchor credential for this profile
• CRISC (Certified in Risk and Information Systems Control) — specialization in risk and control

What Will Make You Successful

• You're naturally curious and enjoy learning new technologies, frameworks, and ways of working.
• You have a strong analytical mindset and enjoy using data to understand problems and recommend improvements.
• You're proactive, resourceful, and comfortable taking ownership of new challenges.
• You embrace AI as part of your daily work and actively look for opportunities to automate tasks and work more efficiently.
• You're excited to grow into a strategic role that combines governance, operational excellence, and business performance.

Why Join Veevart

Join us at a pivotal moment as we build our Governance, Risk & Compliance function from the ground up. You'll take ownership of our ISMS and certification journey while working closely with company leadership.

As the organization grows, so will your role—expanding beyond GRC into Business Excellence, where you'll leverage data, AI, and automation to improve processes, drive operational efficiency, and support strategic decision-making.

We also offer:

• Market-competitive base salary.
• Hybrid work model (Monday to Friday, 3 days in the office).
• Additional benefits, including a monthly connectivity allowance, five personal days per year, 100% salary coverage during medical leave, and more.