5-10+ years in GRC, ideally with Big 4 consulting or in-house audit at a high-growth SaaS. Deep, hands-on expertise in SOC 2, ISO 27001, HIPAA, GDPR. Bonus points for HITRUST, FedRAMP, FDA CFR, US Privacy. Proven track record of consultative customer engagement. Exceptional written and verbal communication. High ownership, strong judgment, and ability to thrive in a fast-paced, ambiguous environment. Passion for teaching and enabling customers.