GRC Director: SOC 2 & ISO 27001 Leader

SF Compute; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Generous equity without restrictions

Visa sponsorships

401(k) retirement matching

Medical, dental & vision insurance

Unlimited paid time off

Parental leave

Daily lunch provided

Unlimited office book budget

Job summary

SFCompute in San Francisco seeks a Director of GRC to own governance, risk, and compliance. You will build the first GRC function, lead SOC 2 Type 2 and ISO 27001 certifications, and shape controls, tooling, and audits with engineering and product teams.

This is a build role in a fast-growing startup; you should have startup-scale experience and a track record delivering ISO27001 for a first-time certification, hiring a small team, and owning the program from day one.

Qualifications

• Senior, high-impact GRC/security compliance roles in a startup environment.
• Experience driving first ISO 27001 certification, from readiness to audit.
• Owns or has run a SOC 2 program.

Responsibilities

• Hire, manage, and develop the GRC team from day one.
• Own SOC 2 Type 2 program and lead ISO 27001 certification end-to-end.
• Stand up enterprise risk management and risk reporting to leadership.
• Design, implement, and operate policies, processes, and controls with cross-functional partners.
• Own the GRC tooling and drive integration of related tech.

Skills

GRC leadership

SOC 2 program

ISO 27001 implementation

People leadership

Startup experience

Cross-functional collaboration

Tools

Vanta

Job description

SFCompute in San Francisco seeks a Director of GRC to own governance, risk, and compliance. You will build the first GRC function, lead SOC 2 Type 2 and ISO 27001 certifications, and shape controls, tooling, and audits with engineering and product teams.

This is a build role in a fast-growing startup; you should have startup-scale experience and a track record delivering ISO27001 for a first-time certification, hiring a small team, and owning the program from day one.