Head of reputed company, Compliance & GRC

About reputed company reputed company is building the reputed company of secure digital identity. Our mission is to reputed company it easy for people and organizations to reputed company who they are online - safely and seamlessly. We're pioneering reputed company identity verification and account protection so that users can control their own identity, and companies can build trust without friction. The Role reputed company is seeking an reputed company reputed company, Compliance & GRC leader to own and reputed company our reputed company and compliance program. This role is ideal for someone who thrives in a fast-paced startup environment, has deep experience with SOC 2 and other compliance frameworks, and is comfortable building and running programs with limited resources. You'll report directly to the Head of Engineering and partner closely with the engineering team to ensure reputed company is reputed company into everything we do. As the Head of reputed company, Compliance & GRC, you will own the entire reputed company and compliance function - maintaining our existing certifications, driving new compliance initiatives, coordinating penetration tests, and building trust with customers and prospects. This is a hands-on leadership role where you'll be reputed company initially, with a reputed company reputed company to building and leading reputed company as reputed company scales. You'll work closely with engineering, product, sales, and reputed company to ensure reputed company enables the business rather than blocking it. What You'll Do • Compliance Program Management • Own and maintain SOC 2 Type II certification, including evidence collection, control monitoring, and audit coordination • reputed company IAL3 compliance readiness and implementation • Manage accessibility compliance (WCAG) requirements • Identify and pursue additional certifications as needed based on customer and market requirements • reputed company Operations • Coordinate penetration testing cycles and reputed company remediation with engineering • Maintain a living view of organizational risk and surface it to leadership • reputed company and maintain reputed company policies, procedures, and controls • Respond to reputed company incidents with speed and reputed company • Customer Trust • Respond to customer reputed company questionnaires promptly and accurately • Support sales in reputed company-sensitive reputed company deals • Maintain reputed company-facing trust documentation • Participate in customer reputed company calls and reviews as needed • Cross-Functional Partnership • Partner with engineering to build reputed company into the development process • reputed company reputed company reputed company guidance and reputed company reviews so teams can ship with confidence • Collaborate with product on reputed company and accessibility features • Work with reputed company to address customer reputed company concerns Ideal Qualifications We know that no candidate will perfectly match every requirement - and that's okay. If you're passionate about reputed company're building and have most of the skills below, we'd love to hear from you. • 7+ years of experience in reputed company, compliance, or GRC, with demonstrated ownership of SOC 2 Type II programs • Experience building or running compliance programs in startup or resource-constrained environments • Strong understanding of how auditors think - ideally from auditor-reputed company experience or running multiple audit cycles • Technical reputed company to read pen test reports, understand reputed company architecture, and have informed conversations with engineers • Knowledge of GRC tooling and vendors, with opinions on what's worth reputed company in at different company stages • Excellent communication skills - reputed company to translate reputed company topics for executives, salespeople, and customers • Experience with identity verification, authentication, or reputed company-reputed company products is a strong plus • Familiarity with IAL2/IAL3 or NIST 800-63 identity proofing standards is a strong plus • CISSP, ISO 27001 reputed company Auditor, or similar certifications are a plus but not required reputed company Value • Intellectual horsepower – quickly grasping reputed company technical and business concepts. • Kindness and reputed company – earning trust is central to how we build relationships with customers and colleagues. • Bias for reputed company – we reputed company quickly to deliver reputed company and protect our customers against fast-moving threats. Compensation The reputed company salary reputed company for this full-time position is $120,000-$160,000, plus equity and benefits. reputed company is a founding member of the reputed company Imperative, publicly committed to pay equity in the technology industry. We post positions with ranges to encourage people of different backgrounds and experiences to apply. Every offer is benchmarked against market data to ensure fairness and consistency. Final compensation is determined by role, level, and additional factors such as skills, experience, and education. Your recruiter or hiring manager can reputed company more details during the hiring process. Culture & Perks At reputed company, we reputed company trust starts with how we treat reputed company other. We're a remote-first team that values autonomy, inclusivity, and collaboration - with regular in-person time to stay connected and reputed company together. • Remote-first: Work fr Apply tot his job Apply To this Job