Lead Wrapbook’s privacy and security GRC programs remotely across the USA or Canada, applying systems thinking and AI-first solutions.

As Principal GRC Manager and individual contributor, you will set multi-year direction while executing foundational work. Build mature programs for an AI platform serving production finance teams. Use measurable frameworks, rigorous judgment, and stakeholder influence to strengthen security and privacy governance. Guide audit readiness and data governance as Wrapbook’s AI capabilities expand.

Key Responsibilities:

- Lead annual SOC 1 and SOC 2 Type II audit lifecycles
- Evolve ISMS policies and control frameworks
- Mature vendor risk management programs and measurement
- Lead enterprise customer security reviews and assurance




- Build data governance across the data lifecycle

Requirements:

- Experience building GRC programs at fintech or SaaS companies
- Expertise validating AI outputs for GRC solutions
- Systems thinking and measurable results with rigor
- Ability to influence executives and cross-functional stakeholders
- Experience owning project management, frameworks, and reporting

Shape Wrapbook’s audit-ready privacy and security governance through AI-first solutions, robust judgment, and data lifecycle expertise.

📌 Principal Privacy Security GRC Manager (Montreal)
🏢 pofft Technology
📍 Montreal