Privacy & Security Compliance Lead

Deepgram; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

Deepgram is seeking a Compliance and Documentation Lead to own the privacy and security compliance program, including DPIAs, data flow maps, retention and deletion workflows, and DPAs. You will prepare evidence for SOC 2, ISO 27001, and PCI DSS, and craft public posture documents and policy guidance for auditors, customers, and engineers.

The role requires exceptional writing, ability to translate complex regulations into actionable requirements, and collaboration with Legal, Security

Qualifications

• Substantial experience in privacy operations, GRC, security compliance, or technical compliance documentation with end-to-end ownership of assessments and audits.

Responsibilities

• Own customer and prospect privacy risk assessments, DPIAs, and transfer impact assessments end to end.
• Build and maintain accurate data flow maps and records of processing across deployments.
• Own the operating model for privacy controls: retention/deletion, DSAR, consent handling, de-identification.
• Own the subprocessor and vendor privacy review processes and DPAs artifacts.
• Translate GDPR/UK GDPR, CCPA/CPRA and AI regulation into concrete requirements for teams.
• Partner with Legal on DPAs, SCCs, transfer mechanisms, and residency commitments.
• Own audit evidence end to end for SOC 2, ISO 27001, and PCI DSS; be auditor's primary contact.
• Maintain cross-framework control mappings and evidence libraries.
• Own security questionnaires and RFP sections; maintain the answer library.
• Design and run compliance auditing workflows and remediation processes.
• Write internal policies and public posture documents; manage versioning.
• Run compliance and privacy training for Sales Engineering.

Skills

Privacy operations

GRC

Security compliance

Technical writing

Audit experience

GDPR/CCPA

Data maps

DSAR workflows

Policy documentation

Templates & tooling

SQL basics

AI governance awareness

Tools

Vanta

Drata

Trust center tooling

Job description

Deepgram is seeking a Compliance and Documentation Lead to own the privacy and security compliance program, including DPIAs, data flow maps, retention and deletion workflows, and DPAs. You will prepare evidence for SOC 2, ISO 27001, and PCI DSS, and craft public posture documents and policy guidance for auditors, customers, and engineers.

The role requires exceptional writing, ability to translate complex regulations into actionable requirements, and collaboration with Legal, Security