Senior GRC & Compliance Strategist

B Capital; San Francisco (CA); On-site; USD 140,000 - 200,000; Full time

Job summary

Perplexity is seeking a Governance, Risk & Compliance Analyst to shape our compliance and risk management program. You will lead efforts across SOC2, ISO 27001 and HIPAA, ensure GDPR/CCPA/CPRA readiness, and design scalable audit processes to support growth.

You will also build a GRC platform and drive cross-functional collaboration with IT, Security and Engineering. The successful candidate will have 6+ years in audit and compliance, demonstrated ability to translate complex requirements into

Qualifications

• 6+ years of experience leading engagements in audit and compliance.
• Ability to translate complex compliance requirements into scalable automation using AI agents and custom tooling.
• Experience in cloud-native environments in high-tech companies.

Responsibilities

• Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA.
• Ensure compliance with certification requirements.
• Maintain compliance with GDPR, CCPA, CPRA and other privacy regulations.
• Design and build scalable audit management processes and documentation systems for future expansion.
• Build internal GRC platform and tooling.
• Conduct risk assessments and mitigate data security and compliance risks.
• Write, update and enact policies capturing security, privacy, and AI safety requirements.
• Monitor AI regulatory landscape to keep the company compliant.

Skills

GRC leadership

Communication

Cross-functional collaboration

Self-motivation

Automation (AI)

Tools

AI agents

Job description

Perplexity is seeking a Governance, Risk & Compliance Analyst to shape our compliance and risk management program. You will lead efforts across SOC2, ISO 27001 and HIPAA, ensure GDPR/CCPA/CPRA readiness, and design scalable audit processes to support growth.

You will also build a GRC platform and drive cross-functional collaboration with IT, Security and Engineering. The successful candidate will have 6+ years in audit and compliance, demonstrated ability to translate complex requirements into