GRC Principal - Data Privacy and Security

Lead the annual SOC 1 and 2 audit lifecycle end-to-end: control monitoring/readiness, work with our SOC auditors and internal business teams to complete the audit project and reporting supporting evidence collection and clarification process, drive control-owner accountability and lead program development to embed continuous, evidence-driven controls.

Own and evolve Wrapbook's ISMS policy suite and control framework (SOC 1, SOC 2 Type II; explore additional ISO compliance opportunities) in collaboration with our Business, Legal, and Security teams.

Mature our approach to vendor risk management, developing and evolving the program, frameworks, prioritization, stakeholder management, and measurement.

Lead Customer Assurance efforts for enterprise security reviews (e.g., enterprise customer and prospect review requirements, cyber-insurance self-assessments) and scale Wrapbook's security and privacy documentation and mechanisms.

Collaborate with Legal and Security teams to build and evolve Wrapbook’s Data Governance program across the data lifecycle (data collection, storage, access, retention, deletion).

Beyond project management you will make recommendations and own decisions on how to best solve Wrapbook’s dynamic and growing data governance challenges.

Build and evolve the privacy compliance program across GDPR and CCPA — DSAR operations, data mapping, retention, and the data governance and classification program.

Partner with Legal on DPAs, subprocessor obligations, and privacy-by-design in product.

Help shape Wrapbook's enterprise AI data governance framework in collaboration with our Security and Legal leadership/org— policies, standards, and controls across the AI/ML lifecycle for both internally built and procured AI.

Track the evolving regulatory and framework landscape (e.g., NIST AI RMF, ISO 42001, EU AI Act) and translate it into Wrapbook’s needs.

Executive fluency and credibility. Translates technical and regulatory risk into business terms leadership can act on, and holds their own in front of executives, auditors, and enterprise customers. Trusted to represent Wrapbook's risk posture externally.

Serve as the subject-matter authority and trusted advisor on Security and Privacy governance and compliance topics.

Mentor cross-functional partners and team members and set the standard for the discipline across the org.

10+ years in GRC, information security and privacy compliance with a track record of building, scaling, and operating highly rigorous programs — ideally at a fintech, start-up, or payments organization.

You have the highest integrity and discretion. ****Customer trust is paramount at Wrapbook and this role will interact with highly sensitive data, owning difficult risk trade-offs with sound ethics and confidentiality.

Project management is second nature, you effectively establish, track, measure and communicate/report out on cross-functional program progress, prioritization decisions/trade-offs, risks, and impact.

Proven experience leveraging AI to automate GRC workload and force-multiply GRC programs to measurable outcomes.

Deep, hands-on expertise across security (SOC 2 / ISO 27001 / PCI DSS), privacy (GDPR / CCPA, DSAR operations, data governance) compliance.

Working fluency in AI/ML governance and the current regulatory landscape. You are comfortable with setting policy where standards are still forming.

Demonstrated ownership of SOC audit lifecycles and enterprise risk and third-party risk programs.

Exceptional cross-functional influence — able to move executives and technical teams without direct authority.

Relevant certifications a plus: CISSP, CISA, CISM, CRISC, CIPP/CIPM/CIPT, and/or AIGP.

Why Join Us

At Wrapbook, creativity meets technology — and not just in the product.

In addition to a competitive salary and all the benefits you can expect from a fast-growing technology company, you’ll get access to a team of creative problem solvers and the chance to see your contributions make large impacts. Benefits include:

Unlimited Paid Time Off

Work from anywhere in Canada and USA

Health and Dental benefits

Up to $1,500 USD/ $2,025 CAD towards IT set up for your home

Up to 2% matching RRSP / 401K

Learning and Development opportunities

Up to $50 USD/ $67.50 CAD towards Internet/Cell phone service

Have we got your attention? Submit your application today and a member of our Talent team will be in touch with you shortly!

#LI-Remote