Senior GRC & Security Lead — Policy, Risk & Compliance

Gong; Austin (CO); Hybrid; USD 121,000 - 185,000; Full time

Benefits offered by this job

Medical, dental, and vision plans

Flexible wellness stipend

401(k) program

Education & learning stipend

Paid parental leave

Job summary

Gong is seeking a Senior GRC Security Lead to architect foundational security and compliance programs. This high-impact role will involve creating Gong's first Common Controls Framework and engagement with various teams to ensure compliance across multiple regulatory standards.

The ideal candidate will have over 7 years of experience in GRC, with a strong background in building programs at high-growth companies. Benefits include flexible vacation, a wellbeing fund, and comprehensive medical coverage, among others.

Qualifications

• 7+ years of experience in GRC or Information Security.
• Hands-on experience building a GRC program at scale.
• Deep expertise in compliance frameworks including SOC 2 and ISO 27001.

Responsibilities

• Design and implement Gong’s Common Controls Framework.
• Partner with Engineering to embed controls in architecture.
• Serve as subject-matter expert during audits and sales engagements.
• Create and maintain risk treatment plans across the business.

Skills

GRC program building

Information Security expertise

Policy writing

Risk assessment management

Stakeholder communication

Education

Bachelor’s degree in Information Security or related field

Tools

GRC tooling

Job description

Gong is seeking a Senior GRC Security Lead to architect foundational security and compliance programs. This high-impact role will involve creating Gong's first Common Controls Framework and engagement with various teams to ensure compliance across multiple regulatory standards.

The ideal candidate will have over 7 years of experience in GRC, with a strong background in building programs at high-growth companies. Benefits include flexible vacation, a wellbeing fund, and comprehensive medical coverage, among others.