Governance Risk and Compliance Lead

Owner
US
Remote

Who this role is best for

Best suited to senior cybersecurity professionals with compliance framework experience working in a remote-first, high-growth startup environment.

Best fit for

  • GRC experts who thrive in cross-functional security leadership roles at scaling startups.
    — “work closely with security leadership to drive major initiatives
  • Technical security professionals comfortable advising executive teams on risk strategy.
    — “Advise senior leadership in regards to handling security risk
  • Compliance specialists with deep PCI/ISO framework implementation experience.
    — “3+ Years experience working with compliance frameworks like PCI / ISO

Things to consider

  • Must demonstrate prior success implementing security programs at startups.
    — “Demonstrated track record of success running a complex security program at a start up
  • Base salary range spans multiple seniority levels based on experience.
    — “This range can fall within several levels from Senior to Principal

How to stand out

  • Showcase specific examples of compliance efforts unlocking business capabilities.
    — “Drive compliance efforts to unlock business capabilities
  • Highlight technical collaboration with engineering teams on security remediation.
    — “Technical understanding and experience working with development teams
  • Quantify past impact on vulnerability prevention and remediation programs.
    — “Secure Owner by helping teams successfully prevent and remediate vulnerabilities
Pace · SteadyCollaboration · HighAutonomy · HighDecision Impact · CompanyLevel · Senior

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • drive compliance efforts
  • secure systems
  • advise senior leadership
Typical background
5+ years in cyber security3+ years in compliance frameworks

Skills & requirements

Required

Compliance FrameworksVulnerability ManagementSecurity ProgramRisk AdvisoryTechnical Understanding

Preferred

Start-up ExperienceAI Integration

Stack & domain

Compliance FrameworksCyber SecurityVulnerability ManagementSecurity ProgramRisk ManagementCommunicationProblem SolvingTeamworkGovernanceCompliance

About the role

Original posting from Owner via Ashby

About Owner

Owner is the AI-native system local business owners use to succeed, starting with restaurants.

We’re building the system that replaces the many tools owners use to run their business.

It powers everything from the restaurant’s website, online ordering, CRM, POS, and more.

Product philosophy

Most small business software makes owners do the work to get what they want: sales growth and profit growth. Owner does the work for them agentically.

Our system drives demand, converts it, and helps operators run their business day to day. As it improves, the business improves with it.

Using Owner should feel like having a team of great operators, engineers, and marketers working for you.

Our vision

We’re starting by helping independent restaurants succeed online.

But it’s not just restaurants that need our help. Most local businesses are struggling with these same problems. Huge technology corporations are taking their customers, bleeding their profits, and making it hard for them to survive.

Once we nail the solution for restaurants – we’ll scale it into every other local business type.

In the future we envision, tens of millions of local business owners will use our technology to succeed in the digital age.

Read our Series C memo here → https://www.owner.com/c

Our traction

Since 2020, we've generated tens of millions in revenue and processed over a billion dollars of online orders. 1 in 5 Americans have used an Owner.com http://Owner.com website.

More importantly, we’ve helped over 20,000 restaurant owners, and saved them nearly $200 million in fees.

Our team

Our team is now in the low hundreds. We’ve got top talent from the most successful companies in SMB software, including: Shopify, HubSpot, DoorDash, ServiceTitan, Rappi, Faire and Stripe.

We’ll be scaling even faster in 2026 to keep pace with our customer growth.

Where we work

Owner is a remote-first, global company headquartered in San Francisco, with a sales hub in Toronto. For a few of our roles we prioritize in-person collaboration at one of our office locations. Most of our teammates are distributed throughout the globe. Please review the role description and discuss with your recruiter for more details on location!

Why we’re looking for you

Owner is seeking a highly skilled GRC Specialist with great energy and experience working with modern software development companies to help us navigate the ever increasing complexity of Risk, Compliance and Vulnerability Management that come along with our rapid growth.

The impact you'll have

  • Drive compliance efforts to unlock business capabilities
  • Secure Owner by helping teams successfully prevent and remediate vulnerabilities
  • Help teams build better and more secure systems by avoiding pitfalls of risk.
  • Advise senior leadership in regards to handling security risk at Owner.

Who you’ll work with

  • You will work cross functionally with every corner of the business supporting our security journey.
  • You will work closely with security leadership to drive major initiatives around around GRC at Owner.

What we’re looking for

  • Strong communication and problem solving skills
  • 3+ Years experience working with compliance frameworks like PCI / ISO
  • 5+ Years experience in Cyber Security
  • Technical understanding and experience working with development teams.
  • Demonstrated track record of success running a complex security program at a start up

Pay and benefits

  • The estimated base salary range for this role is $155,000 to $225,000, plus a generous pre-IPO equity package
  • Other benefits include comprehensive health coverage, remote-first workplace, unlimited PTO - plus extra fun perks!
  • This range can fall within several levels from Senior to Principal depending on experience

Notice - Employment Scams

Communication from our team regarding job opportunities will only be made by an Owner team member with an @owner.com email address.

We do not conduct interviews over email or chat platforms, and we will never ask you to provide personal or financial information such as your mailing address, social security number, credit card numbers or banking information. If you believe you are being contacted by a scammer, please mark the communication as "phishing" or “spam” and do not respond.

Source: Owner careers (Ashby)

Similar roles