GRC Principal - Data Privacy and Security

📋 Description

• Lead the annual SOC 1 and 2 audit lifecycle end-to-end: control monitoring/readiness, work with our
• Own and evolve Wrapbook's ISMS policy suite and control framework (SOC 1, SOC 2 Type II; explore
• Mature our approach to vendor risk management, developing and evolving the program, frameworks
• Lead Customer Assurance efforts for enterprise security reviews (e.g., enterprise customer and
• Collaborate with Legal and Security teams to build and evolve Wrapbook’s Data Governance program
• Beyond project management you will make recommendations and own decisions on how to best solve

🎯 Requirements

• 10+ years in GRC, information security and privacy compliance with a track record of building
• You have the highest integrity and discretion. Customer trust is paramount at Wrapbook and this
• Project management is second nature, you effectively establish, track, measure and
• Proven experience leveraging AI to automate GRC workload and force-multiply GRC programs to
• Deep, hands-on expertise across security (SOC 2 / ISO 27001 / PCI DSS), privacy (GDPR / CCPA, DSAR
• Working fluency in AI/ML governance and the current regulatory landscape. You are comfortable with

🎁 Benefits

• Unlimited Paid Time Off
• Work from anywhere in Canada and USA
• Health and Dental benefits
• Up to $1,500 USD/ $2,025 CAD towards IT set up for your home
• Up to 2% matching RRSP / 401K
• Learning and Development opportunities