🛠 Tech Stack

💼 About This Role

You'll build and scale Hex's security and privacy compliance programs from the ground up as our inaugural GRC hire. You'll lead audits, manage risk, and drive customer trust through a world-class automation-first compliance function.

🎯 What You'll Do

• Own SOC 2, ISO 27001, HIPAA, GDPR, and other compliance programs.
• Lead risk assessments and manage the risk lifecycle.
• Handle customer security questionnaires and trust center content.
• Manage third-party risk and vendor assessments.

📋 Requirements

• 5–8+ years in GRC, compliance, or audit.
• Deep familiarity with SOC 2, ISO 27001, HIPAA, GDPR.
• Experience running audit cycles and certification processes.
• Technical literacy in AWS, SaaS architectures, and cloud security.

✨ Nice to Have

• Certifications like CISA, CISM, CISSP.
• Experience with GRC automation platforms (e.g., Vanta, Drata).
• Familiarity with data protection operations or AI/ML compliance.

🎁 Benefits & Perks

• 🏖️ Remote flexibility
• 💰 Competitive salary
• 🏥 Health coverage
• 📈 Equity
• 🧑‍💻 Home office stipend

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter screen· 30 min
2. 2Hiring manager interview· 45 min
3. 3Technical/behavioral interview· 60 min