← All roles

GRC Principal - Data Privacy and Security

Wrapbook· Legal
Apply on company site
Remote$169k - $232kFull-timePosted 1mo ago

About the role

Principal GRC Manager (Individual Contributor) to lead Wrapbook's privacy and security GRC programs with AI-enabled approaches, setting multi-year strategic direction and owning ground-level execution across data privacy and data security domains.

Responsibilities

  • Lead the annual SOC 1 and 2 audit lifecycle end-to-end: control monitoring/readiness, coordinate with SOC auditors and internal teams, drive control-owner accountability, and embed continuous, evidence-driven controls.
  • Own and evolve Wrapbook's ISMS policy suite and control framework (SOC 1, SOC 2 Type II; explore ISO opportunities) in collaboration with Business, Legal, and Security teams.
  • Mature vendor risk management program, including framework development, prioritization, stakeholder management, and measurement.
  • Lead Customer Assurance efforts for enterprise security reviews and scale security/privacy documentation and mechanisms.
  • Collaborate with Legal and Security to build and evolve Wrapbook’s Data Governance program across data lifecycle (collection, storage, access, retention, deletion).
  • Recommend and own decisions on solving dynamic data governance challenges beyond project management.
  • Build and evolve privacy compliance program across GDPR and CCPA — DSAR operations, data mapping, retention, and data governance/classification.
  • Partner with Legal on DPAs, subprocessor obligations, and privacy-by-design in product.
  • Shape enterprise AI data governance framework with Security and Legal leadership — policies, standards, controls across AI/ML lifecycle for internal and procured AI.
  • Track regulatory landscape (NIST AI RMF, ISO 42001, EU AI Act) and translate into Wrapbook’s needs.
  • Translate technical/regulatory risk to business terms for executives, auditors, and enterprise customers; represent Wrapbook's risk posture externally.
  • Serve as Subject-Matter Authority on Security and Privacy governance and compliance; mentor cross-functional partners and teams.

Qualifications

  • 10+ years in GRC, information security and privacy compliance with track record of building, scaling, and operating rigorous programs (fintech, start-up, or payments preferred).
  • Highest integrity and discretion; experience handling highly sensitive data and risk trade-offs.
  • Strong project management: establish, track, measure, and communicate progress, decisions, risks, and impact.
  • Proven experience using AI to automate GRC workloads and multiply program impact.
  • Hands-on expertise across security (SOC 2, ISO 27001, PCI DSS) and privacy (GDPR, CCPA, DSAR, data governance).
  • Fluency in AI/ML governance and current regulatory landscape; able to set policy where standards are evolving.
  • Experience owning SOC audit lifecycles and enterprise/third-party risk programs.
  • Exceptional cross-functional influence with ability to lead without direct authority.
  • Certifications a plus: CISSP, CISA, CISM, CRISC, CIPP/CIPM/CIPT, AIGP.

Skills

Required:SOC 1 / SOC 2 readiness and audit managementISMS policy and control frameworkVendor risk managementData governancePrivacy compliance (GDPR, CCPA)AI governance

Benefits

  • Unlimited Paid Time Off
  • Work from anywhere in Canada and USA
  • Health and Dental benefits
  • Up to $1,500 USD / $2,025 CAD toward IT setup for home
  • Up to 2% matching RRSP / 401K
  • Learning and Development opportunities
  • Up to $50 USD / $67.50 CAD toward Internet/Cell phone service
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Wrapbook

Control all your spend in one AI‑powered system

The AI platform for production payroll, accounting, and AP. Save time and decrease risk with smarter workflows and concierge paymaster support.

production payrollproduction accountingaccounts payabledata insightsonboardingpayroll
Company profileWebsite

More open roles at Wrapbook