Head of GRC

10+ years of progressively responsible work experience in GRC, Security, IT, Trust or related roles. Expert-level knowledge of Governance, Risk and Compliance, preferably in a B2B context. Experience operating as part of a Trust business function or Information Security program. Modern and technical understanding of best practices for implementing GRC solutions in a cloud-based SaaS platform. Superb verbal and written communication skills. Proven ability to influence across dotted lines and at the executive level. Professional certifications such as CISA, CISM, CRISC, or relevant security credentials.

Design and build effective governance for security, compliance, and AI risks. Lead enterprise risk management and drive risk reduction. Own customer deal support, including triaging, coordination, and questionnaire completion. Drive third-party risk management and due diligence. Support certification and attestation goals. Automate GRC controls and risk telemetry. Maintain customer-facing trust collateral and the Trust Center.