Compliance and Documentation Lead

📋 Description

• Own customer and prospect privacy risk assessments, DPIAs, and transfer impact assessments end to
• Build and maintain accurate data flow maps and records of processing across hosted, dedicated, and
• Own the operating model for privacy controls including retention, deletion, DSAR workflows, consent
• Own the subprocessor and vendor privacy review process and artifacts behind DPAs
• Translate GDPR, UK GDPR, CCPA/CPRA and other privacy laws into concrete requirements for
• Own audit evidence end to end for SOC 2, ISO 27001, and PCI DSS

🎯 Requirements

• Substantial experience in privacy operations, GRC, security compliance, or technical compliance
• Exceptional writer able to turn technical reality into acceptable documents
• Demonstrated ownership of compliance operational systems at scale
• Hands-on involvement in at least one formal audit (SOC 2, ISO 27001, or PCI DSS)
• Practical, applied experience with GDPR and CCPA/CPRA
• Technically fluent and able to read architecture diagrams and follow data flows

🎁 Benefits

• Offers Equity
• Offers Bonus
• 10% Annual Bonus