Director - Governance, Risk, Compliance & Privacy (GRC)
Core
Build and scale the governance, risk, compliance, and privacy function for a portfolio of vertical SaaS companies using AI-first automation.
Role type
Director, GRC & Privacy (Founding/High-Ownership)
Builds
Enterprise governance program for the holding company and scalable audit/certification services for portfolio companies.
Domain
Private Equity / Vertical SaaS / Security Compliance / Data Privacy / AI Governance
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
GRC program building, SOC 2 Type 2 experience, systems thinking, compliance automation platforms, AI tooling fluency, cross-functional communication, technical writing
Preferred skills
Privacy certifications (CIPP, CIPM), ISO 27001/PCI DSS/HIPAA experience, accessibility conformance (WCAG, VPAT), M&A security diligence, multi-entity/PE experience
Technologies
Vanta, Drata, Secureframe, LLM-assisted workflows
Responsibilities
Design scalable GRC architectures, lead portfolio companies through audits and certifications, implement AI-driven automation for compliance workflows, report on enterprise posture.
Seniority
Director, Founding/High-Ownership