Head of Governance, Risk and Compliance

Overview

Lead and shape the GRC strategy across the organization within the Trust and Intelligence function. Establish enterprise-wide governance, risk management, and compliance programs that enable growth while meeting regulatory and contractual obligations. Guide governance for emerging technologies, especially agentic AI, to ensure security, transparency, and auditability. Drive a proactive, business-enabling culture with cross-functional partnerships and board-level reporting. This is a strategic role shaping how GRC adds value rather than constraining innovation.

Pay / Benefits

• flexible/hybrid work opportunities
• inclusive workplace culture
• global team environment
• opportunity to influence governance at scale
• profile-raising GRC transformation
• access to leadership and board interaction

Responsibilities

• Define and maintain enterprise governance, risk, and compliance frameworks across Product, Technology, Finance, Operations and Customer Success
• Lead regulatory compliance activities, audits, controls testing and remediation with external bodies
• Establish risk governance forums, track mitigation, and report risk status to board and executives
• Develop and communicate policy frameworks, control standards, and escalation/workflow processes
• Oversee incident response, breach notification procedures and regulatory violation handling
• Govern agentic AI governance, including responsible AI principles, security controls, auditability and explainability
• Embed compliance into product roadmaps and architecture through close collaboration with Product and Technology
• Build and lead a 5–8+ person GRC team across compliance, policy, audit and AI governance
• Drive a culture of compliance ownership across the organization and enable business decisions through governance

Key requirements

• Proven experience designing and leading enterprise-scale GRC programs (regulatory compliance, risk management, internal controls)
• Strong expertise in data protection and privacy regulations (GDPR, CCPA) and certifications (SOC 2, ISO 27001, etc.)
• Experience managing regulatory audits, remediation tracking, and regulatory relationships
• Familiarity with emerging technology governance, AI/ML governance frameworks and evolving AI regulations
• Excellent communication and stakeholder management; ability to translate complex regulatory concepts for executives
• Demonstrated ability to balance risk management with business enablement and strategic impact
• Experience leading and developing multi-functional teams in compliance, policy, audit, and risk management
• Knowledge of major regulatory frameworks (GDPR, CCPA, SOC 2, ISO 27001, FedRAMP, NIST)
• Track record securing executive and Board support for governance initiatives
• Experience in software/SAAS environments with regulatory/compliance obligations

• strong communication and influence
• collaboration across functions
• strategic mindset and business enablement
• data protection and privacy regulations (GDPR, CCPA)
• regulatory frameworks (SOC 2, ISO 27001, FedRAMP, NIST)
• risk assessment and risk governance

…