GRC Specialist (Cybersecurity)

TL;DR

GRC Specialist (Cybersecurity): Managing risk, compliance, and vulnerability programs for a rapidly growing AI-native SMB platform with an accent on PCI/ISO frameworks and cross-functional security initiatives. Focus on securing development systems, advising senior leadership on risk, and driving compliance efforts to support business scalability.

Location: Must be based in the United States or Canada

Salary: $155,000–$225,000

Company

Owner is an AI-native system designed to help local business owners, starting with restaurants, succeed by automating operations, demand generation, and business management.

What you will do

• Drive compliance efforts to unlock new business capabilities.
• Secure the platform by helping teams prevent and remediate vulnerabilities.
• Advise senior leadership on handling security risks.
• Collaborate cross-functionally to support the company's security journey.
• Drive major initiatives around GRC in partnership with security leadership.

Requirements

• Must be based in the United States or Canada
• 3+ years of experience working with compliance frameworks like PCI or ISO.
• 5+ years of experience in Cyber Security.
• Technical understanding and experience working with development teams.
• Demonstrated track record of success running a complex security program at a startup.
• Strong communication and problem-solving skills.

Culture & Benefits

• Comprehensive health coverage.
• Remote-first workplace.
• Unlimited PTO.
• Generous pre-IPO equity package.
• Opportunity to work with a team of top talent from leading SMB software companies.