GRC Manager, AI Security & Privacy

AI Chopping Block; San Francisco, Northern (CA, KY); Hybrid; USD 190,000 - 275,000; Full time

Benefits offered by this job

Medical/Dental/Vision

Life Insurance

Disability Benefits

Retirement Plan

Parental Leave

Fertility benefits

Wellness Stipend

Office Lunches

Flexible Vacation

Job summary

Decagon is seeking a Governance, Risk, and Compliance Manager to secure customer trust as we scale to Fortune 500 and international enterprises. Working with the head of security and compliance, you will manage the day-to-day execution of our compliance program and lead customer security engagements.

This high-impact role requires meticulous writing, cross-functional coordination, and deep knowledge of privacy laws and enterprise certifications.

Qualifications

• 5+ years of GRC experience in high-growth SaaS or technology companies, with direct responsibility for privacy compliance programs.
• Proven track record contributing to SOC 2, ISO 27001, or similar enterprise compliance certifications.
• Experience in data privacy regulations including CCPA, GDPR, and emerging AI governance frameworks.
• Strong project management skills with ability to coordinate cross-functional teams under tight deadlines.
• Excellent written and verbal communication skills to translate complex security concepts for diverse audiences.
• Working knowledge of technical security controls and ability to collaborate effectively with engineering teams.

Responsibilities

• Improve and maintain the privacy program against ISO 27701, ISO 27018, HIPAA, GDPR, CCPA/CPRA and the wider set of US state laws.
• Own Decagon's privacy program operations end to end: data inventory, DSAR intake and fulfillment, DPAs and cross-border transfer mechanisms, data retention schedule, subprocessor onboarding and our public subprocessor list, breach notification readiness, and company-wide privacy training.
• Partner with legal team to improve existing programs on data residency, subprocessor flow-downs, retention by data class, DPIAs and transfer impact assessments, while owning and driving day-to-day decision.

Skills

GRC

Privacy Compliance

SOC 2 / ISO 27001

CCPA/GDPR

Project Management

Security Communications

Technical Security Controls

Tools

Vanta

Drata

SecureFrame

Job description

Decagon is seeking a Governance, Risk, and Compliance Manager to secure customer trust as we scale to Fortune 500 and international enterprises. Working with the head of security and compliance, you will manage the day-to-day execution of our compliance program and lead customer security engagements.

This high-impact role requires meticulous writing, cross-functional coordination, and deep knowledge of privacy laws and enterprise certifications.