Senior GRC & Privacy Manager

Forerunner; San Francisco (CA); On-site; USD 190,000 - 275,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Life Insurance

Disability benefits

401K/pension

Parental Leave

Wellness stipend

Lunches in office

Generous vacation policy

Job summary

Decagon, a leading security-focused AI platform in San Francisco, seeks a Governance, Risk, and Compliance Manager to secure trust as we scale to Fortune 500 and international enterprises. You will work with the head of security and compliance to manage the day-to-day compliance program and customer security engagements.

You will lead privacy program operations, audits, DPAs, data residency concerns, and transfer risk while delivering clear security communications to customers and internal teams.

Qualifications

• 5+ years of GRC experience leading privacy programs in SaaS/tech companies.
• Proven track record contributing to SOC 2, ISO 27001 or similar certifications.
• Experience with CCPA, GDPR, AI governance frameworks and related regs.

Responsibilities

• Improve and maintain the privacy program across applicable standards (ISO 27701, 27018, HIPAA, GDPR, CCPA/CPRA).
• Own privacy program operations end-to-end: data inventory, DSAR handling, DPAs, cross-border transfers, data retention, subprocessors, breach readiness, training.
• Collaborate with legal to enhance residency, transfer controls, retention by data class and DPIAs, driving day-to-day decisions.

Skills

GRC experience

Privacy compliance

SOC 2 / ISO 27001

Project management

Written & verbal communication

Security controls knowledge

Tools

Vanta

Drata

SecureFrame

Google Cloud Platform security

Job description

Decagon, a leading security-focused AI platform in San Francisco, seeks a Governance, Risk, and Compliance Manager to secure trust as we scale to Fortune 500 and international enterprises. You will work with the head of security and compliance to manage the day-to-day compliance program and customer security engagements.

You will lead privacy program operations, audits, DPAs, data residency concerns, and transfer risk while delivering clear security communications to customers and internal teams.