Head of GRC

📋 Description

• Own the compliance program end-to-end.
• Run GRC ops and SOC 2 readiness (GDPR/CCPA alignment).
• Own customer trust and vendor risk management.
• Build compliance awareness and leadership reporting.
• Part-time (~20 hrs/week); SF preferred, remote possible.

🎯 Requirements

• 8+ years in GRC/compliance/security, with 3+ in leadership.
• Deep SOC 2 Type II audits experience.
• Familiar with GDPR, CCPA, NIST, ISO 27001.
• Strong technical foundation in cloud infra (AWS, GCP, Azure).
• Hands-on and strategic; write policy docs and review security questionnaires.
• Excellent communication; explain risk to non-technical founders and work with engineers.

🎁 Benefits

• Fractional/part-time (~20 hrs/week) with W-2 or 1099 options.
• In-person SF HQ; remote possible for the right candidate.
• Build compliance function from the ground up at a fast-growing B2B SaaS.
• Work with enterprise customers like Microsoft, New Relic.
• High-growth startup with strong backing and traction.
• Equal Opportunity Employer.