{"id":352014,"url":"https://alion.io/job/wrapbook-grc-principal-data-privacy-and-security","title":"GRC Principal - Data Privacy and Security","company":{"id":7334,"name":"Wrapbook","domain":"wrapbook.com","url":"https://alion.io/company/wrapbook","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US","CA"],"hiring_countries_total":2,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":279000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":49},"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"EU AI Act","optional":true},{"name":"GDPR","optional":true},{"name":"ISO 27001","optional":true},{"name":"ISO 42001","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true}],"status":"closed","first_seen_at":"2026-09-01T16:31:58Z","employer_posted_date":"2026-09-01","last_verified_at":"2026-11-04T19:38:26Z","board_verified":false,"closed_at":"2026-11-04T19:38:26Z","days_open":64,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":64},"description":"About Us:\nWrapbook is the AI platform for production finance. We’re building a system of action that puts finance teams in control of their whole production, from payroll, to spend, to accounting.\nBuilt for feature films, TV, and commercials, Wrapbook is trusted by teams at Netflix, Paramount, Anonymous Content, and more. With backing from Andreessen Horowitz, Bessemer Venture Partners, and Jeffrey Katzenberg's WndrCo, our team of 350+ is using AI to transform how finance teams work and empower them to do more with less.\nThe Opportunity - GRC Principal - Data Privacy and Security (Remote - USA / CANADA):\nWe're hiring a Principal GRC Manager (Individual Contributor) to serve as a subject matter expert and technical authority leading Wrapbook's privacy and security GRC programs. This is a high-ambiguity, high-autonomy role for someone who has built and matured GRC programs at a fintech or SaaS company from the ground up. This person will not just maintain grc activities, but bring a strong point of view to set the multi-year direction for how Wrapbook manages GRC investment on the security and privacy front as our AI capabilities expand. This person is both excited to drive the strategic direction and own the ground-level execution across their areas, leveraging AI to amplify their output. You understand the difference between checking boxes and high judgment decisions, you focus on outcomes over activity. You cleanly separate the must-dos and the nice-to-haves informed by a business’ risk appetite, industry context, and overall company objectives.\nYou have a proven track record of building AI-first solutions for traditional GRC problems; you have the expertise and experience to validate AI outputs. You thrive on systems-thinking and delivering measurable results with rigor; you’ll own the project management, frameworks, measurement, outward and upward reporting, influence executives and leaders. You’ll evolve a program that passes SOC 1 and SOC 2 Type II audits, moving it from \"successful audits\" to durable, continuously audit-ready operational maturity. You are a bridge-builder, you know how to develop, grow, and leverage strong relationships and trust with cross-functional stakeholders and leadership.\nWhat You'll Do:\nData Security GRC\nLead the annual SOC 1 and 2 audit lifecycle end-to-end: control monitoring/readiness, work with our SOC auditors and internal business teams to complete the audit project and reporting supporting evidence collection and clarification process, drive control-owner accountability and lead program development to embed continuous, evidence-driven controls.\n\nOwn and evolve Wrapbook's ISMS policy suite and control framework (SOC 1, SOC 2 Type II; explore additional ISO compliance opportunities) in collaboration with our Business, Legal, and Security teams.\n\nMature our approach to vendor risk management, developing and evolving the program, frameworks, prioritization, stakeholder management, and measurement.\n\nLead Customer Assurance efforts for enterprise security reviews (e.g., enterprise customer and prospect review requirements, cyber-insurance self-assessments) and scale Wrapbook's security and privacy documentation and mechanisms.\n\nData Privacy GRC\nCollaborate with Legal and Security teams to build and evolve Wrapbook’s Data Governance program across the data lifecycle (data collection, storage, access, retention, deletion).\n\nBeyond project management you will make recommendations and own decisions on how to best solve Wrapbook’s dynamic and growing data governance challenges.\n\nBuild and evolve the privacy compliance program across GDPR and CCPA - DSAR operations, data mapping, retention, and the data governance and classification program.\n\nPartner with Legal on DPAs, subprocessor obligations, and privacy-by-design in product.\n\nHelp shape Wrapbook's enterprise AI data governance framework in collaboration with our Security and Legal leadership/org- policies, standards, and controls across the AI/ML lifecycle for both internally built and procured AI.\n\nTrack the evolving regulatory and framework landscape (e.g., NIST AI RMF, ISO 42001, EU AI Act) and translate it into Wrapbook’s needs.\n\nCross-functional leadership\nExecutive fluency and credibility. Translates technical and regulatory risk into business terms leadership can act on, and holds their own in front of executives, auditors, and enterprise customers. Trusted to represent Wrapbook's risk posture externally.\n\nServe as the subject-matter authority and trusted advisor on Security and Privacy governance and compliance topics.\n\nMentor cross-functional partners and team members and set the standard for the discipline across the org.\n\nWhat We're Looking For:\n10+ years in GRC, information security and privacy compliance with a track record of building, scaling, and operating highly rigorous programs - ideally at a fintech, start-up, or payments organization.\n\nYou have the highest integrity and discretion. ****Customer trust is paramount at Wrapbook and this role will interact with highly sensitive data, owning difficult risk trade-offs with sound ethics and confidentiality.\n\nProject management is second nature, you effectively establish, track, measure and communicate/report out on cross-functional program progress, prioritization decisions/trade-offs, risks, and impact.\n\nProven experience leveraging AI to automate GRC workload and force-multiply GRC programs to measurable outcomes.\n\nDeep, hands-on expertise across security (SOC 2 / ISO 27001 / PCI DSS), privacy (GDPR / CCPA, DSAR operations, data governance) compliance.\n\nWorking fluency in AI/ML governance and the current regulatory landscape. You are comfortable with setting policy where standards are still forming.\n\nDemonstrated ownership of SOC audit lifecycles and enterprise risk and third-party risk programs.\n\nExceptional cross-functional influence - able to move executives and technical teams without direct authority.\n\nRelevant certifications a plus: CISSP, CISA, CISM, CRISC, CIPP/CIPM/CIPT, and/or AIGP.\n\nThis is a remote position open to candidates located in the United States or Canada. We are unable to sponsor or take over sponsorship of employment visas or work permits for this position. Applicants must be currently authorized to work in the country from which they will perform the work.\nWhy Join Us\nAt Wrapbook, creativity meets technology - and not just in the product.\nIn addition to a competitive salary and all the benefits you can expect from a fast-growing technology company, you’ll get access to a team of creative problem solvers and the chance to see your contributions make large impacts. Benefits include:\nUnlimited Paid Time Off\n\nWork from anywhere in Canada and USA\n\nHealth and Dental benefits\n\nUp to $1,500 USD/ $2,025 CAD towards IT set up for your home\n\nUp to 2% matching RRSP / 401K\n\nLearning and Development opportunities\n\nUp to $50 USD/ $67.50 CAD towards Internet/Cell phone service\n\nOur Pledge to Fostering an Inclusive and Safe Workplace:\nWrapbook pledges to be a harassment- and discrimination-free space for everyone, regardless of age, disability, ethnicity, gender identity or expression, nationality, neurotype, personal appearance, political affiliation, professional background, race, religion, or sexual identity or orientation.\nApply Now\nHave we got your attention? Submit your application today and a member of our Talent team will be in touch with you shortly!","description_format":"text","description_chars":7453,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Media & Entertainment","Professional Services","Payroll Services"],"lifecycle":[{"event":"open","at":"2026-09-05T19:02:42Z"},{"event":"close","at":"2026-11-04T19:38:26Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/wrapbook-grc-principal-data-privacy-and-security","json_url":"https://alion.io/job/wrapbook-grc-principal-data-privacy-and-security.json","meta":{"generated_at":"2026-11-06T03:13:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5381,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7334},"rest":"https://alion.io/mcp/rest/get_company?id=7334"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwrapbook-grc-principal-data-privacy-and-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwrapbook-grc-principal-data-privacy-and-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwrapbook-grc-principal-data-privacy-and-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wrapbook-grc-principal-data-privacy-and-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwrapbook-grc-principal-data-privacy-and-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":352014}},{"tool":"search_jobs","arguments":{"company":"wrapbook.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":352014},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}