GRC Principal - Data Privacy

Job Summary

Leading Wrapbook's privacy and security GRC programs, the full-time remote GRC Principal - Data Privacy will manage SOC audit lifecycles, evolve data governance frameworks, and drive compliance initiatives while collaborating with cross-functional teams.

Key responsibilities

• Lead the annual SOC 1 and 2 audit lifecycle, ensuring control monitoring and readiness
• Own and evolve Wrapbook's Information Security Management System (ISMS) policy suite and control framework
• Collaborate with Legal and Security teams to build and evolve the Data Governance program across the data lifecycle

Required qualifications

• 10+ years of experience in GRC, information security, and privacy compliance, preferably in a fintech or start-up environment
• Proven experience in managing SOC audit lifecycles and enterprise risk programs
• Deep expertise in security and privacy compliance frameworks such as SOC 2, GDPR, and CCPA
• Experience leveraging AI to enhance GRC processes and outcomes
• Relevant certifications such as CISSP, CISA, CISM, or CIPP are a plus