GRC Lead: Security & Compliance Programs

Hightouch; San Francisco (CA); Presencial; USD 160.000 - 230.000; Jornada completa

Descripción de la vacante

Hightouch, a San Francisco-based marketing data platform, seeks a GRC Lead to own customer security reviews and our compliance program. You’ll drive audits, risk decisions, and automation with engineering and legal teams.

You’ll initially handle questionnaires and customer conversations, expanding the program as the function grows. You’ll own SOC 2 and ISO 27001 programs, ensure timely evidence, and define controls across products.

Formación

• You’ve owned a compliance program or major audit cycle and hands-on experience with customer security reviews.
• You can discuss data flows, access controls, cloud infrastructure, and data storage with engineers.
• You build AI-assisted workflows and verify details that change a claim.

Responsabilidades

• Own questionnaires, due diligence, and customer security calls; use AI to accelerate research.
• Drive practical risk decisions and ensure clear ownership and follow-through.
• Maintain approved responses and evidence; surface inconsistencies with AI.
• Own SOC 2 and ISO 27001 programs; assess third-party work and automate evidence collection.
• Track commitments with deadlines; create self-service resources and improve docs.

Conocimientos

Judgment

Technical curiosity

AI fluency

Clear writing

Ownership and urgency

Builder’s mindset

Descripción del empleo

Hightouch, a San Francisco-based marketing data platform, seeks a GRC Lead to own customer security reviews and our compliance program. You’ll drive audits, risk decisions, and automation with engineering and legal teams.

You’ll initially handle questionnaires and customer conversations, expanding the program as the function grows. You’ll own SOC 2 and ISO 27001 programs, ensure timely evidence, and define controls across products.