GRC Director: Build ISO 27001 & SOC 2 Program

San Francisco Compute Co.; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Generous equity grant

Visa Sponsorships

401(k) retirement matching

Medical, dental & vision insurance

Unlimited paid time off

Parental leave

Daily lunch

Job summary

San Francisco Compute Co. is seeking a Director of GRC to own governance, risk, and compliance. You will build and lead a small GRC team, drive SOC 2 Type 2 and ISO 27001 initiatives, and partner with engineering on controls and remediation.

You will shape the compliance program from the ground up, implement policies, and manage auditors. This is a build role requiring startup experience and a track record of delivering certifications.

Qualifications

• Senior, high-impact GRC role at a startup.
• Experience leading first ISO 27001 certification, from readiness to audit.
• Experience owning or running a SOC 2 program.

Responsibilities

• Hire, lead, and develop the GRC team from day one.
• Own SOC 2 Type 2 program and ISO 27001 certification end-to-end.
• Stand up enterprise risk management with risk assessments and reporting.
• Design and implement policies, processes, and training for compliance.
• Own compliance automation tooling and vendor security reviews.
• Collaborate cross-functionally with engineering on controls and remediation.

Skills

GRC leadership

ISO 27001

SOC 2

Security compliance

People leadership

Tools

Vanta

Job description

San Francisco Compute Co. is seeking a Director of GRC to own governance, risk, and compliance. You will build and lead a small GRC team, drive SOC 2 Type 2 and ISO 27001 initiatives, and partner with engineering on controls and remediation.

You will shape the compliance program from the ground up, implement policies, and manage auditors. This is a build role requiring startup experience and a track record of delivering certifications.