GRC Principal - Data Privacy and Security
Wrapbook · Remote · Remote - US & Canada ·
COMPENSATION
$169k – $232k
Listed on the employer's job board (Ashby)
- Fully remote (USA/Canada)
- Principal level IC
- SOC 2 & GDPR focus
- AI-first GRC approach
- Fintech environment
As a subject matter expert, you will define the multi-year direction for Wrapbook's security and privacy investments. You will bridge technical requirements with business goals, ensuring rigorous compliance while leveraging AI to automate GRC workflows and drive measurable outcomes.
What you'll do
- Lead end-to-end SOC 1 and SOC 2 audit lifecycles and evidence collection
- Evolve ISMS policy suite and control frameworks for continuous readiness
- Manage vendor risk programs including prioritization and stakeholder alignment
- Handle enterprise customer security reviews and cyber-insurance assessments
- Build data governance programs covering collection, storage, and retention
- Implement privacy compliance for GDPR and CCPA including DSAR operations
- Shape enterprise AI data governance policies across the ML lifecycle
- Translate regulatory risks into actionable business terms for executives
What you'll need
- 10+ years in GRC, information security, and privacy compliance
- Experience building rigorous programs at fintech or SaaS companies
- Deep expertise in SOC 2, ISO 27001, PCI DSS, GDPR, and CCPA
- Proven track record using AI to automate GRC workloads
- Strong project management skills for cross-functional program tracking
- Ability to influence executives and technical teams without authority
- High integrity and discretion when handling sensitive data
- Comfort setting policy in evolving AI/ML regulatory landscapes
Nice to have
- Certifications such as CISSP, CISA, CISM, CRISC, or CIPP
- AIGP certification or similar AI governance credentials
- Experience with NIST AI RMF or ISO 42001 frameworks
Stack
- SOC 1
- SOC 2 Type II
- ISO 27001
- PCI DSS
- GDPR
- CCPA
- NIST AI RMF
- ISO 42001
How you'll work
- Fully remote within USA or Canada
- Individual contributor role with high autonomy
- Collaborate with Security, Legal, and Business teams
What you get
- Unlimited Paid Time Off
- Health and Dental benefits
- Home office setup stipend up to $1,500 USD
- Internet and cell phone allowance up to $50 USD
- RRSP / 401K matching up to 2%
- Learning and Development opportunities