Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security Assurance & GRC Lead role.
Rezi rewrites your resume against Wispr Flow's job description. Free.
Tailor your resume to this Security Assurance & GRC Lead role.
Rezi rewrites your resume against Wispr Flow's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security Assurance & GRC Lead posting at Wispr Flow — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Security Assurance & GRC Lead posting at Wispr Flow — free, in seconds.
About the Role
Wispr Flow is seeking a Security Assurance & GRC Lead to manage and advance customer assurance and compliance programs. This role involves defining the GRC roadmap across key frameworks and customer requirements, and building scalable systems. You will collaborate with internal teams and engage directly with customers to represent the company's security posture, address concerns, and drive security as a competitive advantage.
Responsibilities
- Own the GRC roadmap, defining priorities for SOC 2 Type II, ISO 27001, customer requirements, privacy, and risk management, prioritizing enterprise blockers.
- Lead customer assurance end-to-end, representing Wispr Flow in reviews and responses, owning questionnaires, due-diligence requests, vendor assessments, and RFP security sections.
- Engage early on major opportunities to anticipate objections and build security plans with Sales.
- Improve the Trust Center, standard responses, and security narratives to make security a go-to-market advantage.
- Standardize and automate processes by tracking turnaround times, recurring objections, and repetitive work, maintaining Drata, SafeBase, and Linear.
- Partner with the compliance engineer to build operating processes, strengthen process design, prioritization, and follow-through.
- Translate patterns from security reviews into structured input for Product and Engineering on areas like SSO/SCIM, audit logs, and data handling.
- Own the AI security narrative, answering customer questions about model providers, data usage, and data flow, and coordinating customer-facing communication for incidents.
- Coordinate audit evidence, track deadlines, maintain controls and policies, drive remediation, and keep the risk register, vendor inventory, and compliance calendar current.
Requirements
- Depth in GRC, security compliance, customer assurance, IT audit, or risk management, with the ability to own both the program and customer conversations.
- Experience leading customer security reviews and explaining security to technical and non-technical audiences.
- Working knowledge of SOC 2, ISO 27001, or similar frameworks, with the ability to create a practical roadmap.
- Strong judgment for prioritizing enterprise blockers and determining escalation needs.
- A track record of creating structure around manual or ambiguous work and improving underlying systems.
- Strong written and verbal communication skills regarding risk, posture, and technical constraints.
- Project-management discipline to drive cross-functional work to completion.
- Comfort working across Engineering, Product, IT, Legal, Sales, Customer Success, and Support.
- Willingness to perform operational work while actively seeking to reduce it over time.
Skills
- SOC 2
- ISO 27001
- Privacy
- Risk Management
- Customer Assurance
- GRC
- IT Audit
- Security Compliance
- Drata
- SafeBase
- Linear
- SSO/SCIM
- Audit Logs
- AI Security
- Data Handling
- Cloud Security
- Access Control
- Encryption
- Logging
- Vulnerability Management
- Incident Response
- SaaS Architecture
- GDPR
- CCPA
- HIPAA
- Data Residency
- Vendor Risk Management
- Automation
- Integrations
- SIG
- CAIQ
- HECVAT
- VSAQ
Location
- Remote
Work Type
- Full-time
Experience Level
- Lead
Education Level
- Security+ certification
- CISA certification
- CGRC certification
- ISO 27001 Lead Implementer certification
Benefits
- H1B sponsorship
- O1 sponsorship
- EB1 sponsorship
- L1 sponsorship
- STEM OPT sponsorship
About the Company
- Wispr is an AI research and product company building the voice interface for computing.
- Our first products are Flow and Notetaker.
- We are building toward an interface that can perceive, understand, and take action with earned trust.
- We are a talent-dense team that holds strong opinions, tests them quickly, and builds technology that sparks joy.
- Our goal is to build the first voice interface used every day by a billion people.
Equal Opportunity
- We strongly encourage you to apply even if you don't meet every qualification.
- We're rethinking how humans interact with AI, and doing that well demands diversity of perspective and experience.
- We're committed to a fair and accessible interview process. If you need any accommodations or adjustments, please let us know.