Senior Privacy & Security Compliance Lead

Deepgram; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Deepgram is seeking a Compliance and Documentation Lead to own the written and evidentiary backbone of our privacy and security programs. You will oversee DPIAs, data flow maps, retention workflows, and DPIA-related evidence that auditors and enterprise customers rely on.

You will work with Legal, Security Engineering, and Solutions teams to translate regulations (GDPR, CCPA, AI Act) into actionable requirements, crafting public posture documents and internal policies.

Qualifications

• Substantial experience in privacy operations, GRC, security compliance, or technical compliance documentation.
• Exceptional writer. This is the central requirement, not a soft skill.
• Demonstrated ownership of compliance operational systems at scale: data maps, DSAR workflows, evidence libraries, policy sets, or tooling behind them.
• Hands-on involvement in at least one formal audit — SOC 2, ISO 27001, or PCI DSS — as the producer and defender of evidence.
• Practical, applied experience with GDPR and CCPA/CPRA, and a current view of AI regulation directions.
• Technically fluent: read architecture diagrams, follow data flows, and identify gaps without translation.
• Able to hold own with Fortune 500 privacy teams and engineers without escalations.
• Startup-friendly: trade-offs between questionnaire answers and policies.

Responsibilities

• Own privacy risk assessments, DPIAs, and transfer impact assessments end to end.
• Build and maintain accurate data flow maps and records of processing across deployments.
• Own the operating model for privacy controls: retention/deletion enforcement, DSAR workflows, consent handling, de-identification and redaction.
• Own the subprocessor and vendor privacy review process, and DPAs artifacts.
• Translate GDPR, UK GDPR, CCPA/CPRA and AI regulation into concrete requirements for GTM teams.
• Partner with Legal on DPAs, SCCs, and transfer mechanisms.
• Own audit evidence end to end for SOC 2, ISO 27001, and PCI DSS; be primary contact during fieldwork.
• Design and maintain crosswalks so one control satisfies multiple standards.
• Author and own internal policies and public posture documents; manage documentation system.

Skills

Privacy operations

GRC

Security compliance

Technical writing

Audit coordination

Data flow mapping

Regulatory knowledge

Vendor due diligence

Tools

Vanta

Drata

Trust Center tooling

Job description

Deepgram is seeking a Compliance and Documentation Lead to own the written and evidentiary backbone of our privacy and security programs. You will oversee DPIAs, data flow maps, retention workflows, and DPIA-related evidence that auditors and enterprise customers rely on.

You will work with Legal, Security Engineering, and Solutions teams to translate regulations (GDPR, CCPA, AI Act) into actionable requirements, crafting public posture documents and internal policies.