Founding GRC Lead

Responsibilities

• Run SOC 1 and SOC 2 Type II audit cycles end to end including control design and evidence automation
• Build Pallet's privacy program for GDPR and CCPA/CPRA including data mapping and DSAR handling
• Act as the primary point of contact for external auditors and assessors
• Implement continuous-compliance infrastructure and embed security controls into engineering workflows
• Stand up vendor risk management including security reviews and DPA negotiation support
• Own the customer-facing trust motion such as security questionnaires and trust centers

Requirements

• 7–12 years across GRC, security compliance, or audit
• Full ownership of at least two SOC 2 Type II cycles
• Experience building or maturing SOC, ISO, GDPR, and privacy compliance programs in-house
• Technical credibility with engineers regarding access controls, encryption, and cloud infrastructure (AWS/GCP)
• Hands-on experience with compliance automation platforms
• Startup-calibrated judgment for building lightweight processes

Preferred Qualifications

• Certifications such as CISA, CISSP, or ISO 27001 LA

Benefits

• Health, Vision, and Dental benefits
• Flexible PTO
• Life and Accidental Insurance
• Short-Term Disability Coverage
• Generous salary and equity
• 401k option
• Paid parental leave
• Yearly learning and development stipend
• Commuter benefits and Uber ride stipend
• Daily catered lunches
• Annual Company Offsites

About the Company

Pallet is building AI Agents to transform the $12 trillion global logistics industry. With $50M raised from top investors, Pallet is automating manual workflows to increase supply chain efficiency through cutting-edge AI capabilities.