Senior Security GRC Lead
Core
Architecting foundational GRC programs, risk registers, and compliance frameworks for a high-growth SaaS revenue intelligence platform.
Role type
Senior GRC Security Lead (Builder)
Builds
Gong's Common Controls Framework, risk register, GRC tooling ecosystem, and executive dashboards.
Domain
SaaS / Revenue Intelligence / Information Security / Compliance
Required skills
GRC program building at scale, multi-framework compliance mapping (SOC 2, ISO 27001, NIST), policy and standards writing, risk quantification, stakeholder management, audit liaison
Preferred skills
CISSP, CISM, CRISC, CISA, CCSP
Technologies
GRC platforms, risk management systems
Responsibilities
Design and implement Common Controls Framework mapping across SOC 2, ISO 27001, HIPAA, PCI; Rationalize overlapping requirements to create a single source of truth; Partner with Engineering to embed controls at architecture level; Establish control testing methodology and continuous monitoring; Build product & enterprise risk register from ground up; Implement GRC platform and executive dashboards; Manage risk treatment plans and remediation; Own information security policy lifecycle; Operate formal exceptions management program; Liaise with external auditors for certifications.
Seniority
Senior, hands-on IC builder
