GRC Lead: AI Privacy & Security Compliance Architect

Perplexity; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will shape our compliance and risk management program in a fast-growing startup focused on privacy by design and customer trust.

You will implement frameworks like SOC 2, ISO 27001 and HIPAA, ensure GDPR/CCPA/CPRA compliance, design scalable audit processes and a robust GRC platform, and help lead regulatory strategy for AI safety.

Qualifications

• 6+ years of experience leading engagements in audit and compliance.
• Ability to translate complex compliance requirements into scalable automation using AI agents.
• Experience in cloud-native environments in high‑tech companies.
• Strong cross‑functional collaboration with IT, Security, GTM, and Engineering.
• Excellent written, verbal, and interpersonal communication skills.

Responsibilities

• Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA.
• Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations.
• Design and build scalable audit management processes and documentation systems.
• Build internal GRC platform and tooling.
• Conduct risk assessments and mitigate data security and compliance risks.
• Write, update and enact policies capturing security, privacy, and AI safety requirements.
• Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices.

Skills

Audit & compliance leadership

AI automation

Cloud-native environments

Cross-functional collaboration

Communication

Job description

Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will shape our compliance and risk management program in a fast-growing startup focused on privacy by design and customer trust.

You will implement frameworks like SOC 2, ISO 27001 and HIPAA, ensure GDPR/CCPA/CPRA compliance, design scalable audit processes and a robust GRC platform, and help lead regulatory strategy for AI safety.