Governance, Risk & Compliance (GRC) Lead

FlutterFlow is a leading visual development platform that revolutionizes the way teams create, design, and deploy applications. With over 2M users across 200+ countries, FlutterFlow enables teams to build apps without extensive coding knowledge. With an intuitive visual interface, granular control over app experience and cross-platform deployment capabilities, FlutterFlow is trusted by startups and Fortune 500 companies alike to accelerate their product development and deliver innovative digital solutions quickly and efficiently.

The Governance, Risk & Compliance (GRC) Lead will drive the overall governance, risk, and compliance (GRC) management programs globally to ensure our products and practices remain compliant, while mitigating operational and legal risks. You will be responsible for all facets of the governance, risk and compliance plan: researching, developing and implementing initiatives, performing oversight (including overseeing regulatory audits), and advising internal stakeholders.

This role is pivotal in improving our global compliance and security posture by ensuring adherence to standards (i.e. SOC2, CCPA, GDPR), embedding compliance into FlutterFlow’s operations through proactive assessments, documentation, and cross-functional collaboration.

What You Will Work On

• Compliance Program Management: Develop, implement, and maintain company-wide compliance policies and procedures to meet evolving regulatory requirements; oversee SOC2 compliance and recertification  efforts and ensure adherence to data privacy laws like GDPR, CCPA, and others as required.
• Risk Management: Conduct compliance assessments, audit internal processes, and maintain a risk register to track risks, impacts, and mitigation strategies.
• Audit and Certification Support: Collaborate with cross-functional teams to prepare for external audits, ensuring documentation and processes meet required standards.
• Contract Risk & Compliance Review: Collaborate with sales teams to assess the compliance and risk considerations of some contracts; ensuring alignment with and prioritization of regulatory standards and internal processes.
• Compliance Calendar Management: Manage key compliance deadlines, including audits, certifications, and regulatory filings.
• Training and Awareness: Develop and deliver compliance training to educate employees on data privacy, security protocols, and ethical standards.
• Documentation and Reporting: Maintain accurate compliance documentation, including policies, procedures, and audit reports; provide regular compliance reports to leadership.
• Escalation and Issue Management: Escalate critical compliance concerns to leadership, ensuring prompt resolution and alignment with company objectives.

Who You Are

• 8+ years of experience in compliance, legal, security or risk management roles, in early stage startup organizations.
• Strong knowledge of regulatory frameworks such as SOC 2, GDPR, CCPA, and global employment laws.
• Bachelor’s degree in Business, Law, or a related field.
• Proven ability to manage cross-functional initiatives and liaise with external legal counsel.
• Excellent written and verbal communication skills, with a focus on creating clear, actionable policies and training materials.
• Detail-oriented with strong project management and organizational skills.

Bonus Points

• Prior experience in SaaS or technology companies.
• Certifications in compliance or risk management (e.g., CCEP, CRCM) are a plus.