Senior GRC & Security Lead — Policy, Risk & Compliance

Gong; San Francisco (CA); On-site; USD 121,000 - 185,000; Full time

Benefits offered by this job

Medical, dental, and vision plans

Wellbeing Fund

401(k) program

Flexible vacation time

Paid parental leave

Job summary

Gong is seeking a Senior GRC Security Lead to architect foundational security programs as part of their compliance and trust initiatives. This role involves designing and implementing Gong's Common Controls Framework and working closely with engineering, legal, and audit teams.

The ideal candidate will have over 7 years of experience in GRC or Information Security, expertise in compliance frameworks such as SOC2 and ISO27001, and strong stakeholder communication skills. Gong offers a competitive salary with comprehensive benefits.

Qualifications

• 7+ years of experience in GRC or Information Security.
• Hands-on experience building GRC programs.
• Deep expertise in compliance and security frameworks.

Responsibilities

• Design and implement Gong's Common Controls Framework.
• Partner with Engineering and Product Security on control embedding.
• Establish control testing methodology and evidence collection.

Skills

GRC program building

Information Security

Compliance frameworks

Risk assessment

Stakeholder communication

Education

Bachelor's degree in Information Security or related field

Tools

GRC platforms

Job description

Gong is seeking a Senior GRC Security Lead to architect foundational security programs as part of their compliance and trust initiatives. This role involves designing and implementing Gong's Common Controls Framework and working closely with engineering, legal, and audit teams.

The ideal candidate will have over 7 years of experience in GRC or Information Security, expertise in compliance frameworks such as SOC2 and ISO27001, and strong stakeholder communication skills. Gong offers a competitive salary with comprehensive benefits.