Compliance and Documentation Lead
Core
Own the written and evidentiary backbone of the compliance program, covering privacy operations, security compliance audits, and public-facing documentation for a voice AI platform.
Role type
Senior individual-contributor compliance and documentation lead
Builds
Privacy program operational work, security compliance obligations (SOC 2, ISO 27001, PCI DSS), and public posture documents
Domain
Voice AI infrastructure, cloud APIs, speech-to-text, text-to-speech
Required skills
Privacy operations, GRC, security compliance, technical compliance documentation, exceptional technical writing, data flow mapping, DSAR workflow design, subprocessor review, control mapping across frameworks, policy lifecycle management, public trust center content creation, operational auditing
Preferred skills
Experience with GDPR, UK GDPR, CCPA/CPRA, EU AI Act, SOC 2, ISO 27001, PCI DSS, AI safety, model cards, self-hosted deployment documentation
Technologies
SOC 2, ISO 27001, PCI DSS, GDPR, UK GDPR, CCPA/CPRA, EU AI Act
Responsibilities
Own customer and prospect privacy risk assessments, DPIAs, and transfer impact assessments; Build and maintain accurate data flow maps and records of processing; Own the operating model for privacy controls including retention, deletion, and DSAR workflows; Own audit evidence end to end for SOC 2, ISO 27001, and PCI DSS; Author and own the lifecycle of internal policies and standards; Author public-facing posture documents including Trust Center content and Model Cards; Design and run operational auditing and remediation workflows.
Seniority
Senior, hands-on IC
