Audit-Ready GRC & Security Compliance Lead

Openkrill; Northern (KY); On-site; USD 120,000 - 190,000; Full time

Job summary

Deepgram seeks a GRC and Security Compliance Lead to own the written and evidentiary backbone of our security and privacy program. You will manage SOC 2, ISO 27001, and PCI DSS evidence, write public posture statements, and ensure consistency across on-prem, colocation, and cloud deployments.

You will partner with Security Engineering, Legal, and Privacy teams, driving automation and documentation quality. Reporting to the Director of Information Security, the role blends writing precision with

Qualifications

• Led end-to-end audit cycles and produced evidence to satisfy auditors.

Responsibilities

• Own audit evidence end to end for SOC 2, ISO 27001, PCI DSS.
• Map controls across multiple frameworks to avoid duplicate work.
• Manage vendor and datacenter security evidence and attestations.
• Maintain security questionnaires and RFP sections, updating library.

Skills

GRC experience

Security compliance

Technical writing

Audit experience

Data privacy

Cross-framework mapping

Startup mindset

GDPR/CCPA knowledge

Tools

Ansible

GitHub

Job description

Deepgram seeks a GRC and Security Compliance Lead to own the written and evidentiary backbone of our security and privacy program. You will manage SOC 2, ISO 27001, and PCI DSS evidence, write public posture statements, and ensure consistency across on-prem, colocation, and cloud deployments.

You will partner with Security Engineering, Legal, and Privacy teams, driving automation and documentation quality. Reporting to the Director of Information Security, the role blends writing precision with