Security Assurance & GRC Lead
About the role
Wispr Flow is hiring a Security Assurance & GRC Lead to own our customer assurance and compliance programs and decide where they go next. You'll set the GRC roadmap across SOC 2, ISO 27001, privacy, and enterprise customer requirements, and build systems that let the program scale faster than request volume. You'll work closely with our vCISO and with Engineering, Product, Legal, Sales, Customer Success, and Support. Much of the role is customer-facing: you'll lead security conversations with sophisticated buyers, represent our posture accurately (including being direct about gaps), and know when to pull in deeper expertise. On our largest deals you'll engage early, identify likely blockers, and have a plan before the questionnaire arrives. You're the DRI for high-priority security and assurance escalations. The goal: security becomes a reason customers choose us.
We sponsor H1B, O1, EB1, L1, STEM OPT, and more. We can't guarantee sponsorship for every role, but if we make you an offer we'll make every reasonable effort, with help from our immigration law firm. We strongly encourage you to apply even if you don't meet every qualification. The strongest candidates we meet rarely do, so don't exclude yourself prematurely. We're rethinking how humans interact with AI, and doing that well demands diversity of perspective and experience. We're committed to a fair and accessible interview process. If you need any accommodations or adjustments, please let us know.
Responsibilities
- Own the GRC roadmap. Define priorities across SOC 2 Type II, ISO 27001, customer requirements, privacy, and risk management. Enterprise blockers come first, with everything else sequenced by business impact.
- Lead customer assurance end-to-end. Represent Wispr Flow on calls, in security reviews, and in written responses. Own questionnaires, due