D
$165,000 – $223,300
Listed on Deepgram’s own careers site. You apply with them directly — we never stand between you and the employer.
What this role is
Deepgram is seeking someone to architect and maintain the documentary and evidential backbone of their security and compliance program, managing audit evidence, control mappings, policies, and public commitments across SOC 2, ISO 27001, and PCI DSS. This role suits a technically fluent compliance professional who can translate complex infrastructure realities into clear, defensible documentation that satisfies auditors, customers, and engineers.
Our summary, not Deepgram’s wording. The full posting is on their site.
Skills this role names
Log in to see which of these are already on your profile.
What they ask for
Required
- Substantial GRC or security compliance experience with at least one complete audit cycle owned end to end
- Exceptional writing ability to turn technical realities into documents that satisfy auditors and engineers
- Hands-on involvement producing and defending evidence in a formal audit (SOC 2, ISO 27001, or PCI DSS)
- Experience mapping controls across multiple compliance frameworks
- Technical fluency with ability to read architecture diagrams, follow data flows, and understand infrastructure and logging implications
- Practical knowledge of GDPR, CCPA/CPRA, and emerging AI regulation
- Preference for building systems and templates over becoming a bottleneck
Nice to have
- CISA, ISO 27001 Lead Implementer/Auditor, CIPM, CIPT, or CIPP/E certification
- Audit experience in on-premise, colocation, or hybrid environments
- Familiarity with compliance automation platforms (Vanta, Drata)
- Knowledge of AI governance frameworks (NIST AI RMF, ISO/IEC 42001, EU AI Act) and model documentation
- Experience with ML/AI data pipelines and training-data governance
- Compliance work managing hybrid deployment models with multi-tenant SaaS and self-hosted options
- SQL, light scripting, or AI tooling skills to independently pull and assemble evidence
- HIPAA or FedRAMP exposure