GRC Principal, Data Privacy & Security (Remote)

Wrapbook; Canada (KY); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Unlimited Paid Time Off

Work from anywhere in USA and Canada

Health and Dental benefits

IT set up allowance

RRSP / 401K matching

Learning and Development opportunities

Internet/Cell phone stipend

Job summary

Wrapbook, the AI platform for production finance, seeks a Principal GRC Manager (Individual Contributor) to lead privacy and security GRC programs. This role blends strategic direction with hands-on delivery, focusing on SOC, ISO, GDPR/CCPA, and data governance within an AI-driven fintech/SaaS context.

You will own audits, build scalable controls, mentor teams, and partner with Legal and Security to advance enterprise risk management while ensuring audit-ready maturity.

Qualifications

• 10+ years in GRC and information security with a track record of building scalable programs.
• Integrity and discretion; customer trust is paramount.
• Strong project management, reporting, and cross-functional coordination.
• Experience leveraging AI to automate GRC workload and drive outcomes.
• Expertise across SOC 2, ISO 27001, PCI DSS, GDPR, and CCPA.

Responsibilities

• Lead the SOC 1 and 2 audit lifecycle end-to-end with evidence collection and accountability.
• Own ISMS policy suite and SOC/ISO framework development with legal and security teams.
• Mature vendor risk management program with metrics and governance.
• Lead enterprise security reviews and scale privacy/documentation for customers.

Skills

GRC leadership

Security governance

Privacy compliance

AI governance

Project management

Cross-functional leadership

SOC 2 / ISO 27001 / PCI DSS

GDPR / CCPA / DSAR

Audits & risk programs

Security/Privacy certifications

Job description

Wrapbook, the AI platform for production finance, seeks a Principal GRC Manager (Individual Contributor) to lead privacy and security GRC programs. This role blends strategic direction with hands-on delivery, focusing on SOC, ISO, GDPR/CCPA, and data governance within an AI-driven fintech/SaaS context.

You will own audits, build scalable controls, mentor teams, and partner with Legal and Security to advance enterprise risk management while ensuring audit-ready maturity.