GRC Lead

Juicebox App, Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Top-of-market compensation

Comprehensive healthcare

$2,000 annual wellness stipend

Daily meals

$300/month commuting stipend

Job summary

Juicebox is seeking its first GRC Lead to build and own governance, risk, compliance, and customer trust. This role sits at the intersection of Legal, Security, Product, Engineering, and GTM, ensuring a strong security posture while enabling customers to adopt Juicebox with confidence.

This strategic, 0→1 position will shape how an AI-native company approaches governance and compliance and directly influence enterprise growth.

Qualifications

• 3+ years in GRC, security compliance, or related field.
• Experience with security questionnaires and enterprise security reviews.
• Strong written communication and ability to translate technical concepts for business audiences.

Responsibilities

• Own and evolve governance, risk, compliance, and customer trust programs.
• Lead SOC 2 Type 2 audits and drive ISO 27001 adoption.
• Manage customer-facing security requests and due diligence processes.
• Develop and maintain security, governance, and corporate policies.
• Evaluate security tooling and collaborate with Engineering and partners.
• Advise Legal, Product, Engineering, and GTM on security matters.
• Position security and trust as competitive advantages for enterprise sales.

Skills

GRC experience

Security compliance

Customer trust

Cross-functional collaboration

Security audits

Job description

About Juicebox

Juicebox is on a mission to help teams win the talent war.

In the age of AI, human ingenuity is the ultimate scarce resource. Recruiting is a zero-sum game where you either compete or lose.

Teams at Ramp, Notion, and leading AI labs use Juicebox to power their hiring, alongside 5,000+ customers from early-stage startups to Fortune 500 companies.

We are on the path to $100M in ARR with 20%+ monthly growth, powering thousands of searches every day and making Juicebox one of the fastest-growing AI SaaS companies in the world.

Juicebox has raised over $116M in funding from lead investors including Sequoia Capital, DST Global, and NFDG. Read more about our $80M Series B here. Additional investors in Juicebox include Y Combinator, Coatue, Bond, Lux, Verified Capital, and Committed Capital.

About the Role

We're hiring our first GRC Lead to build and own the governance, risk, compliance, and customer trust function at Juicebox.

As we continue moving upmarket and serving larger enterprise customers, security and trust have become critical growth enablers. This role will sit at the intersection of Legal, Security, Product, Engineering, and Go-to-Market, ensuring we maintain a strong security posture while helping customers confidently adopt Juicebox.

This is a highly strategic, 0→1 role. You'll own everything from compliance programs and security audits to customer-facing trust initiatives and security questionnaires. If you're excited about building a function from scratch, shaping how an AI-native company approaches governance and compliance, and directly influencing enterprise growth, we'd love to meet you.

You Will…

• Own and evolve Juicebox's governance, risk, compliance, and customer trust programs
• Lead SOC 2 Type 2 audits and drive adoption of additional frameworks such as ISO 27001 and emerging AI governance standards
• Manage all customer-facing security and compliance requests, including security questionnaires, trust documentation, and customer due diligence processes
• Develop and maintain security, governance, and corporate policies, creating new policies as business needs evolve
• Evaluate and improve our security tooling and controls, partnering with Engineering and external security partners to identify gaps and strengthen our security posture
• Serve as a trusted advisor to Legal, Product, Engineering, Customer Success, and Go-to-Market teams on security and compliance matters
• Help position security and trust as competitive advantages that support enterprise sales and customer adoption

You Have…

• 3+ years of experience in GRC, Customer Trust, Security Compliance, or a related field
• Experience owning or supporting compliance frameworks such as SOC 2, ISO 27001, or similar programs
• Experience responding to customer security questionnaires and supporting enterprise security reviews
• Strong written communication skills and the ability to translate technical concepts for business and customer audiences
• A hands-on mindset with the ability to independently drive projects from concept to execution
• Experience working cross-functionally with Legal, Security, Engineering, and Go-to-Market teams

Bonus Points If You…

• Experience building or scaling a GRC, compliance, or customer trust function at a startup
• Familiarity with AI governance, AI risk management, or emerging AI compliance frameworks
• Experience supporting international compliance initiatives, including UK or European requirements
• Experience evaluating security tooling such as device management, endpoint protection, or data loss prevention solutions

Perks & Benefits for Full Time Employees

• Top-of-market compensation with meaningful equity, because everyone should share in our success.
• Comprehensive healthcare with 100% employer-paid medical coverage for employees (PPO Platinum plan with $0 deductible). 90% employer contribution for dependents. Dental & Vision: 90% employer covered; 85% for dependents.
• $2,000 annual wellness stipend to support your physical, mental, and financial well-being.
• Daily meals provided.
• $300/month commuting stipend to help cover the cost of getting to and from the office.