Role Overview
Wispr Flow is hiring a Security Assurance & GRC Lead to own customer assurance and compliance programs and guide their future direction. This full-time position can be based in San Francisco, New York, or performed remotely.
Key Responsibilities
Own the GRC roadmap by prioritizing requirements across SOC 2 Type II, ISO 27001, privacy regulations, and enterprise customer needs.
Lead customer assurance end-to-end through calls, security reviews, written responses, RFPs, and vendor assessments.
Engage early on major strategic deals to anticipate objections and build security plans alongside the sales team.
Improve the Trust Center, standard responses, and security narratives to support customer self-service.
Build efficient systems by tracking turnaround times and repetitive tasks, standardizing workflows, and keeping Drata, SafeBase, and Linear accurate.
Partner with the compliance engineer to establish operating processes and strengthen program design.
Translate patterns from security reviews into structured feedback for Product and Engineering regarding features like SSO, SCIM, and audit logs.
Formulate and maintain the AI security narrative concerning model providers, data usage, retention, and subprocessors.
Coordinate compliance operations including audit evidence, deadlines, control maintenance, policy updates, and risk registers.
Requirements
Background in GRC, security compliance, customer assurance, IT audit, or risk management.
Demonstrated experience leading customer security reviews for both technical and non-technical audiences.
Working knowledge of security frameworks such as SOC 2 and ISO 27001 to build practical roadmaps.
Strong judgment to differentiate between material enterprise blockers and minor items.
Track record of establishing structure around manual or ambiguous workflows.
Excellent written and verbal communication skills paired with cross-functional project management discipline.
Nice to Have
Startup or growth-stage SaaS experience supporting enterprise customers.
Experience establishing or scaling a compliance or customer assurance program.
Familiarity with tools like Drata, Vanta, SafeBase, SIG, CAIQ, HECVAT, and VSAQ.
Knowledge of cloud security, access control, encryption, logging, vulnerability management, and SaaS architecture.
Understanding of AI security, privacy, subprocessors, data flows, GDPR, CCPA, HIPAA, or data residency.
Experience building compliance automations or integrations.
Certifications such as Security+, CISA, CGRC, or ISO 27001 Lead Implementer.
Skills and Tools
SOC 2 and ISO 27001 compliance frameworks
Customer assurance, vendor assessments, and RFP security sections
Drata, SafeBase, Vanta, and Linear
Trust Center management and security narrative creation
Cross-functional stakeholder management
Salary and Benefits
Annual base salary ranging from $150,000 to $190,000 USD
Visa sponsorship support provided for qualified candidates including H1B, O1, EB1, L1, and STEM OPT
About the Company
Wispr Flow is an AI research and product company creating natural voice interfaces for computing. The organization builds technology designed to perceive, understand, and act with earned trust while focusing heavily on the human user experience.
How to Apply
Interested candidates should visit the official Wispr Flow careers page to submit an application.
