GRC and Security Compliance Lead
Deepgram · Remote · USA - Remote ·
COMPENSATION
$179k – $223k
Listed on the employer's job board (Ashby)
- Fully remote role
- GRC & Compliance focus
- SOC 2, ISO 27001, PCI DSS
- Heavy technical writing
- Voice AI industry
You will own the written and evidentiary backbone of Deepgram's security and privacy program. This includes managing documents and evidence for auditors, enterprise customers, and internal engineers. The role ensures consistency between public commitments, internal policies, and actual technical operations across hybrid infrastructure.
What you'll do
- Manage end-to-end audit evidence for SOC 2, ISO 27001, and PCI DSS
- Map controls across frameworks to avoid duplicated compliance work
- Oversee colocation and infrastructure vendor compliance obligations
- Handle security questionnaires and maintain the answer library
- Author and manage lifecycle of internal policies and standards
- Maintain public-facing posture documents like Trust Center content
- Keep data flow maps accurate across hosted and self-hosted deployments
- Partner with engineering to automate evidence generation where possible
What you'll need
- Substantial experience in GRC or technical compliance documentation
- Exceptional writing skills for skeptical audiences like auditors
- Hands-on experience producing evidence for formal audits
- Ability to map controls across multiple compliance frameworks
- Technical fluency to read architecture diagrams and data flows
- Knowledge of GDPR, CCPA/CPRA, and emerging AI regulations
- Judgment to balance ideal controls with startup realities
- Comfort with ambiguity and making defensible decisions
Nice to have
- Certifications like CISA, ISO 27001 Lead, or CIPP/E
- Audit experience in on-premise or colocation environments
- Familiarity with compliance automation platforms like Vanta
- Knowledge of AI governance frameworks such as NIST AI RMF
- Experience with ML data pipelines and training-data governance
- Comfort with SQL or scripting to assemble evidence independently
- Exposure to HIPAA or FedRAMP compliance requirements
Stack
- Docker
- Ansible
- GitHub Actions
- AWS
- SQL
How you'll work
- Fully remote position
- AI-first mindset required for daily workflows
- Fast-paced environment with rapid changes
- Collaboration with Security, Legal, and Research teams