Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Director - Governance, Risk, Compliance & Privacy (GRC) role.

Rezi rewrites your resume against Beacon Holdings's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Director - Governance, Risk, Compliance & Privacy (GRC) posting at Beacon Holdings — free, in seconds.

About the Role

Beacon is seeking a GRC leader to establish and scale the governance, risk, compliance, and privacy functions across its portfolio of software companies. This founding role emphasizes automation and modern AI tooling for an AI-first approach to operations.

Responsibilities

Shape and scale the GRC function from its foundations across the portfolio.
Work directly with portfolio companies to guide them through audits and certifications.
Design a scalable GRC program that grows with the business.
Manage security compliance, data privacy, risk, and AI governance.
Build and manage the holdco's enterprise governance program, including security policy, AI governance, data governance and privacy, enterprise and third-party risk, and posture reporting.
Lead governance initiatives, including any frameworks Beacon elects to pursue.
Take portfolio companies through their own audits and certifications (SOC 2, ISO 27001, accessibility conformance, and others).
Deliver hands-on services that scale across the portfolio.
Develop and maintain a common control architecture that maps a control once to satisfy many standards.
Implement AI-first automation and clear program reporting.

Requirements

Experience building or substantially maturing a GRC program.
Experience taking an organization through SOC 2 Type 2.
Typically several years (5+) in GRC, IT governance, or security compliance.
A builder with a bias for action, focused on automating manual processes.
Strong systems thinker capable of designing scalable GRC architectures.
Fluent with a compliance automation platform (Vanta, Drata, Secureframe, or similar).
Current on AI tooling in practice.
Comfortable across both security compliance and data privacy, or able to ramp quickly.
Excellent cross-functional communicator who works through influence.
Ability to translate compliance requirements into actionable terms for technical and non-technical teams.
Clear writer.
Experience working in a fast-paced, start-up environment.

Skills

Governance, Risk, and Compliance (GRC)
Data Privacy
Security Compliance
AI Governance
SOC 2
ISO 27001
Compliance Automation Platforms
AI Tooling
Cross-functional Communication
Systems Thinking
Automation

Location

Remote

Work Type

Full-time

Experience Level

5+ years in GRC, IT governance, or security compliance

Education Level

Privacy or audit certifications (CIPP, CIPM, CISA, CISSP, or ISO 27001 Lead Auditor or Implementer) are a bonus.

About the Company

Beacon is acquiring and operating a portfolio of vertical SaaS companies.
Beacon's strategy is to scale through software, not just by adding people.
The company's operating system aims to lift the ceiling on human attention bottlenecks in portfolio operations, value creation, and deal sourcing.
Beacon has raised over $550M from prominent investors including General Catalyst, Lightspeed, D1 Capital, CPMG, and the family offices of the founders of Stripe, DoorDash, and Ramp.
Beacon's values are Humility, Honesty, Hunger, and Horizon.
Beacon uses AI and AI-enabled tools to assist in the hiring process for efficiency and consistency, but human judgment makes all final decisions.

Equal Opportunity

We are committed to a fair, thoughtful, and equitable experience for every candidate.