Senior GRC Program Manager for SaaS Security & Privacy

Tandem Ventures; Draper (UT); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

On-site gym

Flexible PTO

Company holidays

Monthly ecommerce allowance

HSA contributions

Weekly lunches

Job summary

Redo is an e-commerce growth platform headquartered in Draper, Utah. We are seeking a seasoned GRC leader to own governance, risk, and compliance—driving SOC 2, GDPR/CCPA, HIPAA, and PCI programs end-to-end with minimal oversight.

You will partner with engineering to translate requirements into controls and ensure audit readiness across the organization. The role demands a self-directed operator who can influence security posture while collaborating with merchants and cross-functional teams in a

Qualifications

• 5+ years in GRC, security compliance, or a closely related role, with hands-on ownership of at least one full compliance program.
• Demonstrated experience taking a company through a full SOC 2 certification and continued surveillance.
• Depth of experience helping SaaS platforms support GDPR and data privacy obligations.
• Experience navigating HIPAA and PCI environments.
• A self-directed operator who can own and mature a program with minimal oversight — you know what 'good' looks like and can drive it independently.
• Ability to translate control requirements into engineering requirements and to collaborate credibly with software engineers.
• Experience responding to customer security reviews and security questionnaires.
• Strong writing and communication skills — you can produce clear policies and explain security posture to both engineers and non-technical stakeholders.
• Comfortable in a fast-moving, high-growth environment where you set the pace.
• Experience using AI for custom compliance automation

Responsibilities

• Own governance, risk, and compliance program end-to-end as Redo scales.
• Collaborate with engineering to translate compliance requirements into concrete controls.
• Maintain audit readiness and lead security reviews with merchants.
• Serve as go-to expert on GRC and security posture across the organization.

Job description

Redo is an e-commerce growth platform headquartered in Draper, Utah. We are seeking a seasoned GRC leader to own governance, risk, and compliance—driving SOC 2, GDPR/CCPA, HIPAA, and PCI programs end-to-end with minimal oversight.

You will partner with engineering to translate requirements into controls and ensure audit readiness across the organization. The role demands a self-directed operator who can influence security posture while collaborating with merchants and cross-functional teams in a