SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 190,000 - 275,000 / annual
Decagon is a conversational AI platform enabling enterprises like Avis, Block, Chime, and Oura Health to deploy AI agents for customer support and operations across voice, chat, email, and SMS. The company is backed by a16z, Accel, Bain Capital Ventures, Coatue, and Index Ventures.
As Governance, Risk, and Compliance Manager - Privacy, you will own the day-to-day execution of Decagon's privacy compliance program and lead customer security engagements. Reporting to the Head of Security and Compliance, you'll play a critical role in building customer trust as the company scales to serve Fortune 500 and international enterprises.
Key responsibilities include:
- Improve and maintain the privacy program against ISO 27701, ISO 27018, HIPAA, GDPR, CCPA/CPRA, and emerging US state privacy laws
- Own privacy program operations end-to-end: data inventory, DSAR intake and fulfillment, DPAs, cross-border transfer mechanisms, data retention schedules, subprocessor onboarding, breach notification readiness, and company-wide privacy training
- Partner with the legal team to enhance programs around data residency, subprocessor flow-downs, retention policies, DPIAs, and transfer impact assessments
- Manage security communications with enterprise customers and support compliance audits
- Improve security documentation to support deal closure
You bring 5+ years of GRC experience in high-growth SaaS or technology companies with direct responsibility for privacy compliance programs. You have a proven track record contributing to SOC 2, ISO 27001, or similar certifications, and deep knowledge of CCPA, GDPR, and emerging AI governance frameworks. Strong project management, written and verbal communication skills, and working knowledge of technical security controls are essential. Experience with AI/ML compliance, healthcare/financial services regulations, GRC platforms (Vanta, Drata, SecureFrame), and cloud security (particularly GCP) is a plus.
About Decagon
AI / Data / Infrastructure; SaaS / Enterprise Software — AI agents for customer support and enterprise operations.
