Role Overview
The GRC Principal - Data Privacy and Security role at Wrapbook is a remote, full-time individual contributor position operating across the US and Canada within the Legal department. This autonomous role suits an experienced governance professional who can build and scale security and privacy GRC programs from the ground up for a growing financial technology platform.
Key Responsibilities
Manage the complete annual SOC 1 and SOC 2 audit lifecycle by driving readiness, monitoring controls, coordinating with auditors, and building continuous evidence-driven processes.
Evolve the Information Security Management System (ISMS) policy suite, control frameworks, and explore new ISO compliance opportunities.
Scale vendor risk management frameworks, prioritization methods, and measurement strategies.
Handle customer assurance efforts, including enterprise security reviews, prospect requirements, and cyber-insurance self-assessments.
Build and advance the Data Governance program alongside Legal and Security across the entire data lifecycle, from collection to deletion.
Develop privacy compliance programs for GDPR and CCPA, handling data mapping, retention, data classification, and Data Subject Access Request (DSAR) operations.
Partner with Legal on Data Protection Agreements (DPAs), subprocessor obligations, and privacy-by-design product integration.
Shape enterprise AI data governance frameworks by designing policies, standards, and controls across the AI and machine learning lifecycle.
Translate technical and regulatory risks into business terms for leadership, executives, and enterprise customers.
Requirements
Ten or more years of professional experience in GRC, information security, and privacy compliance, preferably within a fintech, start-up, or payments organization.
Demonstrated history of building, scaling, and operating rigorous GRC programs.
Strong project management capabilities with experience tracking, measuring, and reporting cross-functional program progress and risk trade-offs.
Proven background in utilizing artificial intelligence to automate GRC workloads and scale program outcomes.
Hands-on expertise in security frameworks such as SOC 2, ISO 27001, and PCI DSS, alongside privacy regulations like GDPR and CCPA.
Working fluency in AI and machine learning governance, regulatory landscapes, and setting policies in emerging standards.
Experience owning SOC audit lifecycles, enterprise risk initiatives, and third-party risk programs.
Exceptional cross-functional influence to guide technical teams and executives without direct authority.
Nice to Have
Relevant industry certifications including CISSP, CISA, CISM, CRISC, CIPP, CIPM, CIPT, and/or AIGP.
Skills and Tools
Data Security GRC and SOC 1 and SOC 2 audit management.
Data Privacy GRC, GDPR, CCPA, and DSAR operations.
AI and Machine Learning governance frameworks.
Vendor risk management and enterprise customer security reviews.
ISMS policy development and control frameworks.
Salary and Benefits
Annual salary range between $143,000 and $232,000 USD.
Unlimited paid time off.
Ability to work remotely from anywhere in the United States and Canada.
Comprehensive health and dental benefits.
Home office IT setup stipend of up to $1,500 USD or $2,025 CAD.
Retirement savings support with up to 2% matching through a 401(k) or RRSP.
Learning and development opportunities.
Monthly internet and cell phone service stipend of up to $50 USD or $67.50 CAD.
About the Company
Wrapbook functions as an artificial intelligence platform built for production finance, offering a system of action for finance teams handling feature films, television shows, and commercials. Trusted by production organizations like Netflix, Paramount, and Anonymous Content, the company is backed by investors such as Andreessen Horowitz, Bessemer Venture Partners, and Jeffrey Katzenberg's WndrCo. The growing team utilizes innovative technology to transform production accounting, spend management, and payroll workflows.
How to Apply
Interested candidates should submit their application directly through the official Wrapbook careers page to connect with a member of the talent team.
