SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Wrapbook is an AI-powered production finance platform trusted by Netflix, Paramount, and other major studios. The company is seeking a GRC Principal to serve as the subject matter expert and technical authority for privacy and security governance, risk, and compliance programs.
In this high-autonomy individual contributor role, you will lead Wrapbook's end-to-end SOC 1 and SOC 2 Type II audit lifecycles, including control monitoring, readiness assessment, evidence collection, and continuous audit-ready operational maturity. You'll own and evolve the ISMS policy suite and control framework, mature vendor risk management programs, and lead customer assurance efforts for enterprise security reviews.
On the privacy side, you will collaborate with Legal and Security to build and evolve the Data Governance program across the full data lifecycle. You'll develop and scale privacy compliance programs for GDPR and CCPA, including DSAR operations, data mapping, and retention policies. You'll also help shape Wrapbook's enterprise AI data governance framework, establishing policies and controls for both internally built and procured AI systems, while tracking evolving regulatory landscapes like NIST AI RMF, ISO 42001, and the EU AI Act.
Cross-functionally, you'll serve as the trusted advisor on security and privacy governance topics, translating technical and regulatory risk into business terms for executive audiences, auditors, and enterprise customers. You'll mentor team members and set discipline standards across the organization.
The ideal candidate has 10+ years of GRC and information security/privacy compliance experience, ideally at a fintech, startup, or payments organization. You bring proven expertise in SOC audits, ISO 27001, PCI DSS, GDPR, CCPA, and data governance. You have hands-on experience leveraging AI to automate GRC workloads and demonstrated ability to influence cross-functional stakeholders. You understand the difference between compliance checkbox activities and high-judgment risk decisions, and you focus on measurable outcomes with rigor and systems thinking.
