Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Pallet is seeking its first dedicated GRC leader to establish and manage trust with customers, auditors, and regulators. This role will oversee SOC 1 and SOC 2 programs, build GDPR and CCPA privacy operations, and collaborate with engineering, product, sales, and legal teams to integrate compliance into the company's operations. The position reports directly to leadership and offers the opportunity to build and grow a GRC function from the ground up.

Responsibilities

Run SOC 1 and SOC 2 Type II audit cycles end to end, including control design, evidence automation, auditor relationships, and timely delivery of reports.
Build Pallet's privacy program for GDPR and CCPA/CPRA, encompassing data inventory and mapping, DSAR handling, DPAs, and privacy reviews integrated into product development.
Serve as the primary point of contact for external auditors and assessors, managing evidence collection, audit responses, and timelines, and translating audit findings into actionable plans.
Implement continuous-compliance infrastructure to ensure audit readiness is a natural outcome of operations.
Embed security and privacy controls into engineering and product workflows through partnership and collaboration.
Establish vendor risk management processes, including security reviews, DPA negotiation support, and maintaining a third-party risk register.
Own the customer-facing trust initiatives, such as security questionnaires and trust center management, to measurably shorten enterprise sales cycles.

Requirements

7–12 years of experience in GRC, security compliance, or audit.
Full ownership of at least two SOC 2 Type II cycles.
Experience building or significantly maturing SOC, ISO, GDPR, and privacy compliance programs in-house.
Technical credibility with engineers, including comfort discussing access controls, encryption, logging, and cloud infrastructure (AWS/GCP).
Deep hands-on experience with compliance automation platforms and evidence workflows.
Startup-calibrated judgment, with the ability to prioritize risks and build lightweight processes.
Certifications such as CISA, CISSP, or ISO 27001 LA are a bonus.

Skills

GRC
Security Compliance
Audit
SOC 1
SOC 2
GDPR
CCPA
CPRA
Privacy Operations
Vendor Risk Management
Security Questionnaires
Trust Center Management
Cloud Infrastructure (AWS/GCP)
Compliance Automation Platforms
Evidence Workflows

Location

San Francisco, CA

Work Type

In-office
Remote (US-wide for select roles)

Experience Level

7-12 years

Salary/Compensations

$175,000-$225,000

Benefits

Health, Vision, and Dental benefits
Flexible PTO
Life Insurance and Accidental Insurance
Short-Term Disability Coverage
Generous salary and equity
401k option
Yearly learning and development stipend
Commuter benefits for Bay Area employees
Uber ride stipend for late work
Remote office home stipend
Daily catered lunches
Onboarding trip to San Francisco HQ for remote employees
Monthly happy hours
Annual Company Offsites

About the Company

Pallet is transforming the $12 trillion global logistics industry with AI Agents.
The company has raised $50M from prominent investors including General Catalyst, Bessemer Venture Partners, and Bain Capital Ventures.
Pallet has achieved 700% revenue growth in under two years.
Our mission is to increase global supply chain efficiency by automating manual workflows in logistics.
The flagship platform offers end-to-end visibility, control, and optimization.
CoPallet, a newer product, features AI Agents for real-time request understanding and execution, with direct customer system integration.
Pallet is positioned to become a $10B+ company in logistics tech.
The team includes leaders from Google, DoorDash, and YC.

Equal Opportunity

Pallet is an Equal Opportunity Employer.
Employment decisions are based solely on merit.
Equal employment opportunities are provided to all applicants and employees without discrimination based on race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, disability status, or any other applicable legally protected characteristic.
Discrimination or harassment is prohibited.
This policy applies to all terms and conditions of employment, including hiring.
Pallet complies with the Americans with Disabilities Act (ADA) and applicable state or local laws, providing reasonable accommodation for qualified individuals with disabilities during the application process and employment.