Beacon Software

SaaS

Lead,Governance,Risk,Compliance&Privacy(GRC)

$175–250k ~AI est. San Francisco, California, United States FULL TIME Remote Friendly
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for Lead candidates.

The Brief

“Lead, Governance, Risk, Compliance & Privacy (GRC) at Beacon Software. Skills: Governance, Risk, Compliance, Privacy. Build and scale GRC function. Scale GRC across portfolio”

Industry & Context.

SaaS

What They're Looking For.

Must Have

Built or substantially matured GRC program, Taken organization through SOC 2 Type 2, 5+ years in GRC, IT governance, or security compliance, Fluent with compliance automation platform, Current on AI tooling

Nice to Have

Privacy or audit certifications, Experience with regimes beyond SOC 2, Experience with accessibility conformance, Technical fluency, Multi-entity experience, Private-equity experience, Holding-company experience, M&A security and privacy diligence experience

What You'll Do.

Build and scale GRC function

Scale GRC across portfolio

Work with portfolio companies

Take companies through audits

Take companies through certifications

Design scalable GRC program

Build holdco's enterprise governance program

Develop security policy

Develop AI governance

Develop data governance

Develop privacy program

Manage enterprise risk

Manage third-party risk

Develop posture reporting

Pursue governance frameworks

Deliver repeatable service for audits

Satisfy many standards

Implement AI-first automation

Provide clear program reporting

How You'll Work.

Team & Collaboration

Cross-functional teams; Engineering teams; Technical teams; Non-technical teams

Communication Scope

Translate requirements

Full Job Description

ABOUT BEACON SOFTWARE Beacon https://beaconsoftware.com/ is acquiring and operating a portfolio of vertical SaaS companies. Most private equity firms scale by adding people. We are building Beacon to scale by adding software. The thesis is simple: portfolio operations, value creation, and deal sourcing are bottlenecked by human attention, and an agentic operating system can lift that ceiling by an order of magnitude. We are looking for a GRC leader to build and scale the governance, risk, compliance, and privacy function for a growing portfolio of software companies. This is a founding, high-ownership role for someone who has built before and treats automation and modern AI tooling as the default way to operate. Beacon has raised $550M+ from investors including General Catalyst, Lightspeed, D1 Capital, CPMG, and the family offices of the founders of Stripe, DoorDash, and Ramp.   ABOUT THE ROLE Our GRC function is at an early, formative stage. You would shape it from the foundations and scale it across the portfolio, working directly with our portfolio companies to take them through their own audits and certifications, and designing a program that grows with the business rather than one built for a single audit. The mandate spans security compliance, data privacy, risk, and AI governance. We expect it to be built AI-first: modern automation platforms and LLM-assisted workflows over manual process. WHAT YOU'LL DO The role spans two scopes: - Beacon. The holdco's enterprise governance program: security policy, AI governance, data governance and privacy, enterprise and third-party risk, and posture reporting. Governance-led, including any frameworks Beacon itself elects to pursue. - Portfolio companies. Taking our portfolio companies through their own audits and certifications (SOC 2, ISO 27001, accessibility conformance, and others as their customers require), delivered hands-on as a repeatable service that scales across the portfolio. Underpinning both: a common contr

Free ATS check

Applying for this Lead, Governance, Risk, Compliance & Privacy (GRC) role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on Ashby

  • Ashby is a fast modern ATS — most applications take under 3 minutes.
  • The resume parser is strong; verify parsed experience dates and job titles.
  • Custom screening questions are often scored algorithmically — answer completely.
  • Location field affects geo-based screening; use your actual metro area.

ANONYMOUS · UNFILTERED

What do employees actually say about Beacon Software?

Real rants from real employees. Read before you apply.

Read Company Rants →