Director of GRC

Overview

Job Description

Responsibilities

• - Build systems and processes that align governance, risk, and compliance with Feeld’s mission, values, and pace of innovation
• - Support cross-functional teams in understanding and integrating GRC principles into product development, operations, and decision-making
• - Lead efforts to achieve and maintain compliance with key frameworks and regulations (e.g., GDPR, CCPA, ISO 27001)
• - Develop and maintain a living risk register, partnering with teams to assess, prioritize, and mitigate key risks
• - Implement a scalable vendor risk management program, including onboarding, due diligence, and periodic reviews
• - Design and deliver engaging education and training to embed a culture of trust, care, and accountability across the company
• - Monitor evolving regulatory landscapes and industry best practices to keep Feeld ahead of compliance requirements
• - Advise leadership on emerging risks and compliance needs, offering clear, values-aligned recommendations
• - Document policies, controls, and processes clearly and accessibly, balancing rigor with usability
• - Champion a thoughtful, values-first approach to compliance that builds user trust and supports ethical growth

Required Skills

• - Experience leading or shaping governance, risk, and compliance programs—especially in tech, startups, or mission-driven environments
• - Comfortable interpreting and applying data privacy regulations like GDPR and CCPA, and understand how to make them work across borders
• - Partnered with cross-functional teams like Product, Legal, Security, or People to build systems that are both practical and values-aligned
• - Skilled at turning policies and frameworks into tools that people actually use—whether in a fast-paced, global, or nontraditional setting
• - Experience with ISO 27001 or SOC 2 implementation in a scaling or remote-first organization
• - Familiar with how product, engineering, and data teams work—and enjoy collaborating with them to embed ethical and compliant practices
• - Worked in an international, privacy-forward, or consent-centric business
• - Curious about how governance and compliance can support more inclusive, equitable systems—not just check a box
• - Supported or led incident response, policy design, or vendor management in past roles
• - Comfortable navigating grey areas and helping others feel confident in doing the same

Benefits

• - Flexible working hours
• - Unlimited paid time off
• - A fully remote working situation
• - GBP £3k equipment and home office budget
• - Learning & development budget
• - On demand therapy sessions and mental health support via Spill
• - In-person meet ups
• - A compensation system that is transparent, honest, and equitable