# GRC and Security Compliance Lead

Hiring organization: [Deepgram](https://career.thegoodapps.co/organizations/deepgram)

Canonical page: https://career.thegoodapps.co/jobs/1952caca-70cc-46ab-b74b-ba75d3ef6dc1

Listed on Deepgram's own careers site. Applications go to them directly.

- Seniority: Mid
- Location: USA - Remote
- Remote: yes
- Salary: 165000 – 223300 USD per year

## Summary

Deepgram is seeking someone to architect and maintain the documentary and evidential backbone of their security and compliance program, managing audit evidence, control mappings, policies, and public commitments across SOC 2, ISO 27001, and PCI DSS. This role suits a technically fluent compliance professional who can translate complex infrastructure realities into clear, defensible documentation that satisfies auditors, customers, and engineers.

_Our summary, not Deepgram's wording._

## Skills named

Amazon Web Services (AWS), Ansible, Docker, GDPR, GitHub Actions, PCI DSS

## Required

- Substantial GRC or security compliance experience with at least one complete audit cycle owned end to end
- Exceptional writing ability to turn technical realities into documents that satisfy auditors and engineers
- Hands-on involvement producing and defending evidence in a formal audit (SOC 2, ISO 27001, or PCI DSS)
- Experience mapping controls across multiple compliance frameworks
- Technical fluency with ability to read architecture diagrams, follow data flows, and understand infrastructure and logging implications
- Practical knowledge of GDPR, CCPA/CPRA, and emerging AI regulation
- Preference for building systems and templates over becoming a bottleneck

## Nice to have

- CISA, ISO 27001 Lead Implementer/Auditor, CIPM, CIPT, or CIPP/E certification
- Audit experience in on-premise, colocation, or hybrid environments
- Familiarity with compliance automation platforms (Vanta, Drata)
- Knowledge of AI governance frameworks (NIST AI RMF, ISO/IEC 42001, EU AI Act) and model documentation
- Experience with ML/AI data pipelines and training-data governance
- Compliance work managing hybrid deployment models with multi-tenant SaaS and self-hosted options
- SQL, light scripting, or AI tooling skills to independently pull and assemble evidence
- HIPAA or FedRAMP exposure

Apply on Deepgram's site: https://jobs.ashbyhq.com/Deepgram/5ed3eb80-7532-467c-9f3e-04a0590a3966/application