Pallet

1 month ago

Founding GRC Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Foundational GRC leadership role to design and own Pallet's compliance program end-to-end, including SOC 1/2, GDPR/CCPA privacy operations, vendor risk, and embedding controls across engineering and product to shorten enterprise sales cycles.

Location: San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Entrepreneurship & Venture Building

Seniority: Sr. Manager level

Key Responsibilities

•Own SOC 1 and SOC 2 Type II audit cycles end-to-end, including control design, evidence automation, auditor relationships, and timely report delivery
•Build Pallet’s privacy program for GDPR and CCPA/CPRA including data inventory, DSAR handling, DPAs, and privacy reviews integrated into product development
•Serve as primary contact for external auditors and assessors, translating findings into actionable remediation plans
•Implement continuous-compliance infrastructure so audit readiness is built into operations rather than an annual event
•Embed security and privacy controls into engineering and product workflows and stand up vendor risk management including security reviews and DPAs

Pay and Benefits

Perks:Health InsuranceVisionDental401kLearning StipendRemote OfficeCommuter BenefitsHome StipendMeal AllowanceTravel Allowance

Key Requirements

•7–12 years across GRC, security compliance, or audit with ownership of multiple SOC 2 Type II cycles
•Built or matured SOC, ISO, GDPR, and privacy programs in-house with hands-on implementation
•Technically credible with engineers: comfortable discussing access controls, encryption, logging, and cloud infrastructure (AWS/GCP)
•Deep hands-on experience with compliance automation platforms and evidence workflows
•Startup-calibrated judgment with certifications (CISA, CISSP, ISO 27001 LA) as a bonus rather than a substitute for experience

Experience:7-12 yearsGRCSecurity complianceAuditPrivacy

Skills:CommunicationLeadershipProblem-solvingStakeholder managementAnalytical thinking

Certifications:CISACISSPISO 27001 LA

Languages:English

Tech Stack:AWSGCPCloudEncryption

Company Brief

Pallet

Provides an employer-focused platform that helps companies offer housing and homeownership benefits to employees, including relocation support, home purchase assistance, and housing-related resources to improve employee retention and recruitment.

Industry: HR Tech

Headquarters: United States

Website

Loading job details...

Preparing the role view and application actions.

Pallet

1 month ago

Founding GRC Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Location: San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Entrepreneurship & Venture Building

Seniority: Sr. Manager level

Key Responsibilities

•Own SOC 1 and SOC 2 Type II audit cycles end-to-end, including control design, evidence automation, auditor relationships, and timely report delivery
•Build Pallet’s privacy program for GDPR and CCPA/CPRA including data inventory, DSAR handling, DPAs, and privacy reviews integrated into product development
•Serve as primary contact for external auditors and assessors, translating findings into actionable remediation plans
•Implement continuous-compliance infrastructure so audit readiness is built into operations rather than an annual event
•Embed security and privacy controls into engineering and product workflows and stand up vendor risk management including security reviews and DPAs

Pay and Benefits

Perks:Health InsuranceVisionDental401kLearning StipendRemote OfficeCommuter BenefitsHome StipendMeal AllowanceTravel Allowance

Key Requirements

•7–12 years across GRC, security compliance, or audit with ownership of multiple SOC 2 Type II cycles
•Built or matured SOC, ISO, GDPR, and privacy programs in-house with hands-on implementation
•Technically credible with engineers: comfortable discussing access controls, encryption, logging, and cloud infrastructure (AWS/GCP)
•Deep hands-on experience with compliance automation platforms and evidence workflows
•Startup-calibrated judgment with certifications (CISA, CISSP, ISO 27001 LA) as a bonus rather than a substitute for experience

Experience:7-12 yearsGRCSecurity complianceAuditPrivacy

Skills:CommunicationLeadershipProblem-solvingStakeholder managementAnalytical thinking

Certifications:CISACISSPISO 27001 LA

Languages:English

Tech Stack:AWSGCPCloudEncryption

Company Brief

Pallet

Industry: HR Tech

Headquarters: United States

Website