# Governance, Risk, and Compliance Manager

**Company:** [Decagon](https://hotfix.jobs/companies/decagon)
**Location:** San Francisco, CA
**Role:** Legal
**Salary:** $190k – $275k/yr
**Experience:** 3+ years
**Skills:** SOC 2, ISO 27001, Pci Dss, HIPAA, CCPA, GDPR, Vanta, Drata, Secureframe, GCP
**Posted:** 2026-04-10

> Leads execution of GRC compliance programs including SOC 2, ISO 27001, and data privacy certifications. Manages customer security assessments, RFP responses, and vendor risk for enterprise AI platform, requiring 3-5 years GRC experience in SaaS.

## Job Description

## Responsibilities
- Drive compliance certifications including SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, and CCPA
- Automate or execute compliance evidence collection, ensuring all controls are properly documented and audit-ready
- Maintain and improve security documentation including policies, procedures, and customer-facing security collateral
- Support customer security assessments by preparing materials for security reviews and helping address technical inquiries from Fortune 500 security teams
- Manage security and compliance topics in RFPs end-to-end, coordinating responses across engineering, product, and legal teams
- Coordinate with contractors and vendors to maintain response quality and meet timelines during peak sales periods
- Build and optimize repeatable processes to scale GRC operations to hundreds of enterprise customers
- Partner with sales engineering to understand customer security requirements and proactively prepare responses for common concerns
- Partner with Sales and Customer Success to accelerate deal velocity by proactively addressing customer security concerns with published content
- Collaborate with Security, Engineering, and Product teams to translate compliance requirements into actionable technical controls and ensure new features meet regulatory standards
- Establish vendor risk management programs to assess and monitor third-party security risks across our supply chain

## Requirements
- 3-5 years of GRC experience in high-growth SaaS or technology companies, with direct responsibility for compliance programs
- Proven track record successfully contributing to SOC 2, ISO 27001, or similar enterprise compliance certifications
- Experience in data privacy regulations including CCPA, GDPR, and emerging AI governance frameworks
- Strong project management skills with ability to coordinate cross-functional teams under tight deadlines
- Excellent written and verbal communication skills to translate complex security concepts for diverse audiences
- Working knowledge of technical security controls and ability to collaborate effectively with engineering teams

## Nice-to-Haves
- Experience with AI/ML compliance frameworks and understanding of unique risks in conversational AI systems
- Background in healthcare or financial services with knowledge of HIPAA or PCI requirements
- Track record of building GRC programs at companies scaling from startup to enterprise
- Experience with GRC platforms like Vanta, Drata, or SecureFrame to automate compliance workflows
- Understanding of cloud security particularly Google Cloud Platform compliance and security features

## Compensation
**$190K – $275K + Equity**

## Similar roles

- [Product Counsel](https://hotfix.jobs/jobs/21a3b753-c900-4f37-b85a-c7d4c7f70263) - Mirage - New York, NY - $190k – $280k/yr
- [Commercial Counsel](https://hotfix.jobs/jobs/b0bac8e2-0a26-43ba-b935-e40817652e15) - Postman - San Francisco, CA - $190k – $230k/yr
- [Governance, Risk & Compliance Manager](https://hotfix.jobs/jobs/06288482-1df7-4e88-8585-f5b1fa8e07ba) - Sigma - San francisco, CA - $190k – $215k/yr
- [Product Attorney](https://hotfix.jobs/jobs/d19cea93-fb40-4194-adfd-0210c7574d4b) - Fivetran - Denver, CO - $190k – $238k/yr
- [Product Counsel](https://hotfix.jobs/jobs/bef1d075-ec14-481c-b7d9-cf163bf1f0c4) - Instacart - Remote - $193k – $244k/yr

**Apply:** https://hotfix.jobs/jobs/5e407075-824a-4639-96f7-821772a6f497
**Canonical:** https://hotfix.jobs/jobs/5e407075-824a-4639-96f7-821772a6f497