GRC and Security Compliance Lead

Description: Lead the GRC and Security Compliance initiatives at Deepgram, focusing on SOC 2, ISO 27001, and PCI DSS compliance. Own the documentation and evidence required for audits, ensuring consistency across policies and public statements. Requirements: Substantial experience in GRC, security compliance, or technical compliance documentation, with a proven track record of managing audit cycles. Exceptional writing skills to create clear, defensible documentation for auditors and engineers. Hands-on experience with formal audits (SOC 2, ISO 27001, PCI DSS) and control mapping across frameworks. Technically fluent in infrastructure and data flow, with startup-friendly judgment on compliance matters. Knowledge of GDPR, CCPA/CPRA, and AI regulation trends. Benefits: Opportunity to work in a fast-paced, AI-driven environment with a focus on innovation. Flexible work culture that encourages experimentation and adaptation.