GRC Principal - Data Privacy and Security

Wrapbook
United States, Canada
Workplace: RemoteFull timeUSD 169,000 - 232,000 annuallyFunction: Solutions Engineering & Sales EngineeringExperience: 10+ yearsSkills: ["Systems-thinking","Cross-functional influence","Executive communication","Integrity","Discretion"]

Serve as technical authority and subject-matter expert to lead Wrapbook’s data security and data privacy GRC programs. Own and evolve the SOC 1 and SOC 2 Type II audit lifecycle, ISMS policy suite, vendor risk, and customer assurance. Build and operationalize data governance across the data lifecycle, GDPR/CCPA compliance, DSAR operations, and enterprise AI/ML governance, translating evolving regulatory and framework requirements into measurable program maturity.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Wrapbook
Wrapbook
6 days ago

GRC Principal - Data Privacy and Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Serve as technical authority and subject-matter expert to lead Wrapbook’s data security and data privacy GRC programs. Own and evolve the SOC 1 and SOC 2 Type II audit lifecycle, ISMS policy suite, vendor risk, and customer assurance. Build and operationalize data governance across the data lifecycle, GDPR/CCPA compliance, DSAR operations, and enterprise AI/ML governance, translating evolving regulatory and framework requirements into measurable program maturity.
Location: United States, Canada
Workplace: Remote
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Lead the annual SOC 1 and SOC 2 Type II audit lifecycle end-to-end, including readiness, evidence collection, auditor and internal team collaboration, and control monitoring.
  • •Own and evolve the ISMS policy suite and control framework, collaborating across Business, Legal, and Security and exploring additional ISO compliance opportunities.
  • •Mature vendor risk management and scale customer assurance documentation for enterprise security reviews and cyber-insurance self-assessments.
  • •Build and evolve the data governance program across the data lifecycle (collection, storage, access, retention, deletion) and drive privacy compliance across GDPR and CCPA, including DSAR operations.
  • •Partner with Legal on DPAs, subprocessor obligations, privacy-by-design, and help shape enterprise AI data governance across the AI/ML lifecycle.

Pay and Benefits

Salary: USD 169,000 - 232,000 annually
Perks:Paid LeaveHealth InsuranceDental401k MatchingLearning BudgetHome OfficeInternet Stipend

Key Requirements

  • •10+ years in GRC, information security, and privacy compliance building and operating rigorous programs ideally in fintech, start-up, or payments
  • •Deep, hands-on expertise across security compliance (SOC 2/ISO 27001/PCI DSS) and privacy compliance (GDPR/CCPA, DSAR operations, data governance)
  • •Demonstrated ownership of SOC audit lifecycles and enterprise risk and third-party risk programs
  • •Project management experience establishing, tracking, measuring, and communicating cross-functional program progress and risk trade-offs
  • •Experience using AI to automate GRC workload and drive measurable outcomes
  • •Relevant certifications are a plus (e.g., CISSP, CISA, CISM, CRISC, CIPP/CIPM/CIPT, AIGP)
Experience:10+ yearsFintechStart-upPaymentsSaaS
Skills:Systems-thinkingCross-functional influenceExecutive communicationIntegrityDiscretion
Certifications:CISSPCISACISMCRISCCIPP/CIPM/CIPTAIGP
Tech Stack:SOC 1SOC 2 Type IIISMSISO 27001PCI DSSGDPRCCPADSARData governanceNIST AI RMFISO 42001EU AI ActAI/ML governance

Company Brief

Wrapbook
Provides payroll, production accounting, and HR software tailored for film, television, and commercial production companies to manage crew payments, onboarding, compliance, and production finances.
Industry: Film & Television
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: Santa Monica, United States
Founded: 2016
WebsiteLinkedIn