← All roles

Security Assurance & GRC Lead

Wispr Flow· Customer Support
Apply on company site
Hybrid (San Francisco or New York)$150k - $190k + equityFull-timePosted 1mo ago

About the role

Lead Wispr Flow's customer assurance and compliance programs, defining and executing the GRC roadmap across SOC 2, ISO 27001, privacy, and enterprise requirements while enabling scalable security posture and serving as a primary customer-facing security representative.

Responsibilities

  • Own the GRC roadmap. Define priorities across SOC 2 Type II, ISO 27001, customer requirements, privacy, and risk management.
  • Lead customer assurance end-to-end. Represent Wispr Flow on calls, in security reviews, and in written responses. Own questionnaires, due-diligence requests, vendor assessments, and RFP security sections through completion, and drive cross-functional resolution on escalations.
  • Get ahead of strategic deals. Engage early on major opportunities, anticipate objections, and build a security plan with Sales.
  • Make security a GTM advantage. Improve the Trust Center, standard responses, and security narratives so customers can self-serve and our posture is easy to understand.
  • Build the system, not just run it. Track turnaround times, recurring objections, and repetitive work, then standardize and automate. Keep Drata, SafeBase, and Linear accurate.
  • Develop the team. Partner with our compliance engineer to build the operating processes together, strengthening process design, prioritization, and follow-through.
  • Feed reviews back into the product. Turn patterns from security reviews into structured input for Product and Engineering on SSO/SCIM, audit logs, permissions, retention, data residency, and AI/data handling.
  • Own the AI security narrative. Answer questions about model providers, training and data usage, retention, subprocessors, and data flows; coordinate clear customer-facing communication during incidents (without owning incident response).
  • Keep compliance running. Coordinate audit evidence, track deadlines, maintain controls and policies, drive remediation, and keep risk register, vendor inventory, and compliance calendar current.

Qualifications

  • Depth in GRC, security compliance, customer assurance, IT audit, or risk management, with breadth to own both program and customer conversations.
  • Experience leading customer security reviews and explaining security to technical and non-technical audiences.
  • Working knowledge of SOC 2, ISO 27001, or similar frameworks, and ability to translate into practical roadmaps.
  • Judgment to distinguish blockers from items needing escalation; ability to determine what can be answered independently vs. what requires escalation.
  • Track record of creating structure around manual or ambiguous work and improving underlying systems.
  • Strong written and verbal communication on risk, posture, and constraints; project-management discipline to drive cross-functional work to completion.
  • Comfort working across Engineering, Product, IT, Legal, Sales, Customer Success, and Support; willingness to do operational work while reducing it over time.

Skills

Required:GRC program managementSecurity reviews & customer communication

Benefits

  • Equity on employee-friendly terms, including extended exercise windows and a combination of ISOs and RSUs. Ask for details.
Last updated Oct 4, 2026. Interested? Apply on the company site.

About Wispr Flow

Wispr Flow | Effortless Voice Dictation

Flow makes writing quick and clear with seamless voice dictation. It is the fastest, smartest way to type with your voice.

4x fasterAIAI Auto EditsAI writingAndroidFlowFlow for CreatorsFlow for Customer Support
Company profileWebsite

More open roles at Wispr Flow