Information Security and GRC Manager

The role

You will execute and operate Scribe's security and compliance program across assurance, customer security, risk management, and internal security operations. This includes running the SOC 2 program, handling customer security reviews, and managing internal security programs.

What you will do

• Run the SOC 2 program end to end including control ownership, evidence collection, and auditor management.
• Own customer security reviews, questionnaires, and the trust center.
• Lead security calls alongside Sales, Customer Success, and Legal.
• Provide technical input on security commitments in customer contracts.
• Maintain the risk register, security policies, and vendor security review process.
• Turn audit findings and security issues into concrete engineering work.
• Operate and scale internal security programs including access reviews, security awareness training, endpoint management, vulnerability management, and incident response readiness.

Required qualifications

• 6+ years of experience in information security, GRC, or security compliance at a SaaS or technology company
• 2+ years managing individual contributors
• Hands-on experience running SOC 2 Type II audits
• Experience handling enterprise customer security reviews and questionnaires
• Working knowledge of cloud security, identity and access management, endpoint security, and vulnerability management
• Familiarity with GRC automation platforms (e.g., Vanta, Drata, Secureframe)
• Experience with information security and privacy frameworks like ISO 27001, HIPAA, FERPA, public-sector requirements, and AI governance frameworks

Nice to have

• CISSP, CISM, or CISA certification

Benefits

• Comprehensive health, dental, and vision plans, including two $0/month medical plan options
• Equity
• 401(k) Plan through Vestwell
• $500/year Flex Benefit for home office equipment, productivity tools, learning & development or fitness/wellness
• $100/month Commuter Benefits for SF based employees
• Flexible paid time off and company holidays
• Paid parental leave
• Free Talkspace membership
• One Medical access (location-dependent)
• Kindbody discounts for family planning

About the company

Scribe is a specialized intelligence platform used by more than 94% of the Fortune 500 to capture how work happens. Based in San Francisco, it is a LinkedIn Top Startup valued at over $1B.