Senior GRC Specialist
About Delve
Delve is on a mission to eliminate busywork for humanity by turning compliance from a manual grind into an effortless, automated partnership. Trusted by over 450 fast‑growing companies—like Lovable, 11x, and WisprFlow—we save them hundreds of hours and help them build securely. Backed by Insight Partners, General Catalyst, Y Combinator, and top‑tier investors, our team includes former founders, Olympiad medalists, and engineers from OpenAI, Stanford, MIT, and Berkeley.
About the Role
As our Senior GRC Specialist, you’ll be the go‑to advisor for both internal teams and our customers. You’ll leverage your deep framework expertise to guide and enable customers through every phase of their compliance journey, partnering closely with Sales, Customer Success, Product, and Engineering to turn requirements into real‑world impact. This position is open to candidates based in the San Francisco Bay Area or fully remote anywhere in the U.S.
Backed by Insight Partners, General Catalyst, Y Combinator, and top-tier investors, we just raised our 32M Series A and are scaling quickly!
What You’ll Do
Customer Advisory & Enablement: Lead consultative calls and workshops to translate SOC 2, ISO 27001, HIPAA, GDPR, HITRUST, FedRAMP, FDA CFR, US Privacy, and more into clear, actionable roadmaps.
Framework Expertise: Serve as the Subject‑Matter Expert on traditional and non‑traditional cybersecurity frameworks—answer customer questions, review control implementations, and troubleshoot audit hurdles.
Cross‑Functional Partnership: Work hand‑in‑hand with Product & Engineering to bake audit‑readiness and customer feedback into our platform’s DNA.
Sales & CS Support: Empower Sales and Customer Success teams with talking points, battlecards, and on‑the‑fly guidance during customer conversations and demos.
Policy & Controls: Own the design, documentation, and continuous improvement of both our internal compliance program and customer‑facing best practices.
Audit Readiness: Coordinate readiness assessments, manage evidence collection, and ensure both Delve and our customers are always prepared for external audits.
What We’re Looking For
5-10+ years in GRC, ideally with Big 4 consulting or in‑house audit at a high‑growth SaaS.
Deep, hands‑on expertise in SOC 2, ISO 27001, HIPAA, GDPR—and bonus points for HITRUST, FedRAMP, FDA CFR, US Privacy.
Proven track record of consultative customer engagement: workshops, training, roadmaps, and executive briefings.
Exceptional written and verbal communication—clarity is your default.
High ownership, strong judgment, and the ability to thrive in a fast‑paced, ambiguous environment.
A passion for teaching and enabling customers to succeed, not just for ticking boxes.
Location & Work Model
Flexible: Join us fully remote from anywhere in the U.S., or work from our San Francisco office.
Collaboration: Whether you’re in‑office or remote, you’ll partner closely with an all‑star team—decisions happen fast, and energy is contagious across time zones.
Benefits
100% medical, dental & vision coverage (you); partial for dependents
401(k) with employer match
Unlimited PTO + federal holidays
Very Competitive Compensation