Wispr Flow
Security Assurance & GRC Lead
$150K–$190K
San Francisco or New York · Hybrid · Full-time · Posted Sep 16, 2026
- Visa sponsorship
- Sponsors H1B, O1, EB1, L1, STEM OPT, and more; sponsorship is not guaranteed for every role, but the company says it will make every reasonable effort if an offer is made.
About the job
Own Wispr Flow’s GRC roadmap and customer assurance program, leading security reviews and compliance work while turning customer feedback into product and process improvements.
What you'll do
- Set and run the GRC roadmap across SOC 2 Type II, ISO 27001, privacy, customer requirements, and risk management.
- Lead customer security reviews, questionnaires, due diligence, and escalations; coordinate cross-functional resolutions and strategic deal support.
- Maintain compliance operations and improve assurance systems, including evidence, controls, policies, remediation, risk tracking, and automation.
What they ask for
- Depth in GRC, security compliance, customer assurance, IT audit, or risk management.
- Experience leading customer security reviews and explaining security to technical and non-technical audiences.
- Working knowledge of SOC 2, ISO 27001, or similar frameworks.
- Strong communication, project-management, judgment, and cross-functional collaboration skills.
Nice to have
- Startup or growth-stage SaaS experience supporting enterprise customers.
- Familiarity with Drata, Vanta, SafeBase, or similar tools; standard questionnaires; or relevant security certifications.
Pay
$150K – $190K USD base salary
Tools
SOC 2 Type II, ISO 27001, Drata, SafeBase, Linear, Vanta, SIG, CAIQ
AI focus
Own the AI security narrative for customers, addressing model providers, training and data usage, retention, subprocessors, and data flows; feed AI/data-handling review patterns back to Product and Engineering.
Model-written summary · the original posting is authoritative