Skip to main content
CareerApp

GRC Principal - Data Privacy and Security

Wrapbook

Remote - US & Canada · Remote · full time · Senior

$143,000 – $232,000

Listed on Wrapbook’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

Wrapbook seeks a seasoned governance and compliance expert to architect and operate their security and privacy compliance programs as the company scales its AI-powered finance platform. This role demands someone who can balance strategic program design with hands-on execution, shepherding SOC audits and privacy frameworks while influencing executives and building trust with enterprise customers.

Our summary, not Wrapbook’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • 10+ years in GRC, information security, and privacy compliance
  • Track record building and scaling rigorous programs at fintech, startup, or payments organization
  • Deep hands-on expertise in security compliance (SOC 2, ISO 27001, PCI DSS)
  • Deep hands-on expertise in privacy compliance (GDPR, CCPA, DSAR operations, data governance)
  • Experience owning SOC audit lifecycles end-to-end
  • Experience managing enterprise risk and third-party risk programs
  • Strong cross-functional influence without direct authority
  • Proven use of AI to automate GRC work and multiply program outcomes
  • Working fluency in AI/ML governance and regulatory landscape
  • Exceptional integrity and discretion with sensitive data
  • Currently authorized to work in USA or Canada without visa sponsorship

Nice to have

  • CISSP certification
  • CISA certification
  • CISM certification
  • CRISC certification
  • CIPP/CIPM/CIPT certification
  • AIGP certification

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.