GRC Lead

Juicebox; United States; On-site; USD 150,000 - 180,000; Full time

Benefits offered by this job

Top-of-market compensation

Comprehensive healthcare

Wellness stipend

Daily meals

Commuting stipend

Job summary

Juicebox is hiring its first GRC Lead to own governance, risk, compliance, and customer trust. This 0 to 1 role sits at the intersection of Legal, Security, Product, Engineering, and Go-to-Market to ensure a strong security posture while enabling enterprise adoption.

You will build programs, run audits (SOC 2 Type 2, ISO 27001), handle customer security questionnaires, craft policies, and improve tooling. You’ll influence growth and position security as a competitive advantage.

Qualifications

• 3+ years in GRC, customer trust, or security compliance.
• Experience leading SOC 2 or ISO 27001 programs.
• Experience handling customer security questionnaires and enterprise reviews.
• Ability to translate technical concepts for business audiences.
• Hands-on, cross-functional collaborator with drive from concept to delivery.
• Experience working with Legal, Security, Engineering, and GTM teams.

Responsibilities

• Own and evolve governance, risk, compliance, and customer trust programs.
• Lead SOC 2 Type 2 audits and drive ISO 27001 adoption.
• Manage customer-facing security requests, questionnaires, and due diligence.
• Develop and maintain security and governance policies.
• Evaluate tooling and controls; partner with Eng and external security teams.
• Advise Legal, Product, Engineering, Customer Success, and GTM on security matters.
• Position security as a competitive advantage to enable enterprise growth.

Skills

GRC

Security compliance

SOC 2

ISO 27001

Customer questionnaires

Policy development

Cross-functional teamwork

Security audits

Written communication

Tools

Policy management tools

Job description

About Juicebox

Juicebox is on a mission to help teams win the talent war.

In the age of AI, human ingenuity is the ultimate scarce resource. Recruiting is a zero-sum game where you either compete or lose.

Teams at Ramp, Notion, and leading AI labs use Juicebox to power their hiring, alongside 5,000+ customers from early-stage startups to Fortune 500 companies.

We are on the path to $100M in ARR with 20%+ monthly growth , powering thousands of searches every day and making Juicebox one of the fastest-growing AI SaaS companies in the world.

Juicebox has raised over $116M in funding from lead investors including Sequoia Capital, DST Global, and NFDG. Read more about our $80M Series B here. Additional investors in Juicebox include Y Combinator, Coatue, Bond, Lux, Verified Capital, and Committed Capital.

About the Role

We're hiring our first GRC Lead to build and own the governance, risk, compliance, and customer trust function at Juicebox.

As we continue moving upmarket and serving larger enterprise customers, security and trust have become critical growth enablers. This role will sit at the intersection of Legal, Security, Product, Engineering, and Go-to-Market, ensuring we maintain a strong security posture while helping customers confidently adopt Juicebox.

This is a highly strategic, 0 to 1 role. You'll own everything from compliance programs and security audits to customer-facing trust initiatives and security questionnaires. If you're excited about building a function from scratch, shaping how an AI-native company approaches governance and compliance, and directly influencing enterprise growth, we'd love to meet you.

You Will…

• Own and evolve Juicebox's governance, risk, compliance, and customer trust programs
• Lead SOC 2 Type 2 audits and drive adoption of additional frameworks such as ISO 27001 and emerging AI governance standards
• Manage all customer-facing security and compliance requests, including security questionnaires, trust documentation, and customer due diligence processes
• Develop and maintain security, governance, and corporate policies, creating new policies as business needs evolve
• Evaluate and improve our security tooling and controls, partnering with Engineering and external security partners to identify gaps and strengthen our security posture
• Serve as a trusted advisor to Legal, Product, Engineering, Customer Success, and Go-to-Market teams on security and compliance matters
• Help position security and trust as competitive advantages that support enterprise sales and customer adoption

You Have…

• 3+ years of experience in GRC, Customer Trust, Security Compliance, or a related field
• Experience owning or supporting compliance frameworks such as SOC 2, ISO 27001, or similar programs
• Experience responding to customer security questionnaires and supporting enterprise security reviews
• Strong written communication skills and the ability to translate technical concepts for business and customer audiences
• A hands-on mindset with the ability to independently drive projects from concept to execution
• Experience working cross-functionally with Legal, Security, Engineering, and Go-to-Market teams

Bonus Points If You…

• Experience building or scaling a GRC, compliance, or customer trust function at a startup
• Familiarity with AI governance, AI risk management, or emerging AI compliance frameworks
• Experience supporting international compliance initiatives, including UK or European requirements
• Experience evaluating security tooling such as device management, endpoint protection, or data loss prevention solutions

Perks & Benefits

• Top-of-market compensation with meaningful equity, because everyone should share in our success.
• Comprehensive healthcare with 100% employer-paid medical coverage for employees (PPO Platinum plan with $0 deductible). 90% employer contribution for dependents. Dental & Vision: 90% employer covered; 85% for dependents.
• $2,000 annual wellness stipend to support your physical, mental, and financial well-being.
• Daily meals provided.
• $300/month commuting stipend to help cover the cost of getting to and from the office.