Gong
Senior Security GRC Lead
$121K–$185K
Austin +5 · Senior · Full-time · Posted Jun 23, 2026
- Location
- Austin
Chicago
New York City
Salt Lake City
San Francisco
San Francisco, California, United States - Experience
- 7+ years; progressive experience in GRC, Information Security, or a closely related function.
- Education
- Bachelor’s degree in Information Security, Computer Science, Business, or a related field; equivalent practical experience considered.
About the job
Build and lead Gong’s security GRC programs, including its controls framework, risk management process, GRC tooling, and information security policy lifecycle.
What you'll do
- Design and implement a Common Controls Framework, control testing, evidence standards, and continuous monitoring across applicable frameworks.
- Establish risk registers, assessments, treatment plans, reporting, and a GRC platform and dashboards.
- Own security policies and exceptions management, and support external audits, customer audits, and enterprise sales engagements.
What they ask for
- 7+ years of progressive experience in GRC, Information Security, or a closely related function, including meaningful program-building or scaling experience.
- Hands-on experience building a GRC program at scale and implementing GRC tooling or a system of record.
- Expertise across multiple security and compliance frameworks, including SOC 2 Type II, ISO 27001, NIST CSF, and at least one regulatory framework (GDPR, CCPA, HIPAA, or equivalent).
- Experience with product and enterprise risk assessments, policy writing, and communication with senior stakeholders.
Nice to have
- Experience in a high-growth SaaS or technology company.
- CISSP, CISM, CRISC, CISA, CCSP, or comparable credentials.
Pay
$121,000 - $185,000 USD (base salary)
Tools
SOC 2, ISO 27001, ISO 27017, ISO 27701, ISO 27018, HIPAA, PCI, NIST CSF
Model-written summary · the original posting is authoritative