GRC Principal: Data Privacy & Security (Remote)

ProfilHQ

United States

Remote

CAD 252,000 - 364,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Unlimited Paid Time Off

Work from anywhere in Canada and USA

Health and Dental benefits

Up to $1,500 USD/ $2,025 CAD towardsIT

Up to 2% matching RRSP / 401K

Learning and Development opportunities

Up to $50 USD/ $67.50 CAD towards IT/I

Job summary

Wrapbook is a fintech platform revolutionizing production finance with AI-driven GRC programs. We seek a Principal GRC Manager to lead privacy and security governance, with autonomy to shape multi-year strategy and oversee alignment with business risk appetite.

The role combines strategic direction with hands-on execution across Data Security GRC, Data Privacy GRC, and cross-functional leadership. Remote in US/Canada; strong interaction with executives and auditors is essential.

Qualifications

10+ years in GRC, information security and privacy compliance.
Experience building scalable, enterprise-grade GRC programs.
Ability to translate risk into business terms for executives.
Proven AI-enabled GRC automation experience.
Expertise in SOC 2 / ISO 27001 / PCI DSS and GDPR/CCPA.
Certifications a plus: CISSP, CISA, CISM, CRISC, CIPP/CIPM/CIPT, AIGP.

Responsibilities

Lead annual SOC 1 and 2 audit lifecycle end-to-end with auditors and internal teams.
Own ISMS policy suite and control framework (SOC 1, SOC 2 Type II; explore ISO options).
Mature vendor risk management program including frameworks and measurement.
Lead enterprise security reviews and scale security/privacy documentation.