GRC Principal – Data Privacy and Security

Job not on LinkedIn

🔥 0 minutes ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $143k - $232k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Wrapbook

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🛡️ Insurance

📦 Logistics

💰 $100M Series B on 2021-11

Consulting • Insurance • Logistics

Wrapbook is a smart production payroll and accounting platform built by industry veterans for the entertainment industry. It provides a comprehensive suite of services, including fast onboarding, payroll management, cost tracking, production accounting, and real-time reporting, all within an intuitive interface. The platform is designed to efficiently connect producers, accountants, cast, and crew members, enabling them to manage production finances seamlessly. Wrapbook also offers expert services in union compliance, insurance, and employer-of-record payroll. The platform integrates with leading accounting and production tools, making it the versatile choice for feature films, episodic TV, commercials, and more. With significant investment from Bessemer Venture Partners, Wrapbook is focused on accelerating innovation in production finance and payroll solutions.

📋 Description

• Serve as subject matter expert and technical authority for Wrapbook's privacy and security GRC programs • Lead the annual SOC 1 and SOC 2 audit lifecycle end-to-end, including control monitoring, audit coordination, evidence collection, reporting, and continuous control development • Own and evolve the ISMS policy suite and control framework across SOC 1, SOC 2 Type II, and potential ISO compliance opportunities • Mature the vendor risk management program, including frameworks, prioritization, stakeholder management, and measurement • Lead Customer Assurance efforts for enterprise security reviews and cyber-insurance self-assessments • Scale security and privacy documentation and mechanisms • Build and evolve the Data Governance program across data collection, storage, access, retention, and deletion • Make recommendations and own decisions on dynamic data governance challenges • Build and evolve privacy compliance across GDPR and CCPA, including DSAR operations, data mapping, retention, data governance, and classification • Partner with Legal on DPAs, subprocessor obligations, and privacy-by-design in product • Shape the enterprise AI data governance framework across the AI/ML lifecycle for internally built and procured AI • Track regulatory and framework developments such as NIST AI RMF, ISO 42001, and the EU AI Act • Translate technical and regulatory risk into actionable business terms for executives • Serve as trusted advisor on Security and Privacy governance and compliance • Mentor cross-functional partners and team members and set the organizational standard for the discipline

🎯 Requirements

• 10+ years in GRC, information security and privacy compliance • Track record of building, scaling, and operating highly rigorous programs, ideally at a fintech, start-up, or payments organization • Highest integrity and discretion; ability to handle highly sensitive data and own difficult risk trade-offs with sound ethics and confidentiality • Strong project management skills, including establishing, tracking, measuring, and communicating cross-functional program progress, prioritization decisions/trade-offs, risks, and impact • Proven experience leveraging AI to automate GRC workload and force-multiply GRC programs to measurable outcomes • Deep, hands-on expertise across SOC 2, ISO 27001, PCI DSS, GDPR, CCPA, DSAR operations, and data governance compliance • Working fluency in AI/ML governance and the current regulatory landscape • Demonstrated ownership of SOC audit lifecycles and enterprise risk and third-party risk programs • Exceptional cross-functional influence without direct authority • Relevant certifications a plus: CISSP, CISA, CISM, CRISC, CIPP/CIPM/CIPT, and/or AIGP

🏖️ Benefits

• Unlimited Paid Time Off • Work from anywhere in Canada and USA • Health and Dental benefits • Up to $1,500 USD / $2,025 CAD towards IT set up for your home • Up to 2% matching RRSP / 401K • Learning and Development opportunities • Up to $50 USD / $67.50 CAD towards Internet/Cell phone service