‍

GRC & Compliance Lead (Fractional), HockeyStack

HockeyStack is building infrastructure for enterprise revenue, with a platform designed to unify and operationalise data across sales, marketing, and customer success. The company has developed a system that preserves full data context and uses AI to turn it into structured, repeatable workflows.

Since launching in late 2023, HockeyStack has reached eight-figure ARR, processes large volumes of revenue data monthly, and works with major B2B companies. The company has raised over $50M from investors including Bessemer Venture Partners, General Catalyst, and Y Combinator.

About The Role

HockeyStack is hiring its first dedicated GRC and compliance leader to take ownership of its compliance program, risk management framework, and overall security posture.

This is a fractional, part-time role with an expected commitment of around 20 hours per week, with flexibility to increase involvement during audits, incidents, or key customer reviews. The role can be remote, with a preference for candidates based in San Francisco.

What You Will Do

You will own the compliance function end-to-end, building and maintaining policies, procedures, and controls. You will manage compliance operations, including SOC 2 audit readiness, evidence collection, and alignment with frameworks such as GDPR and CCPA.

You will handle customer-facing compliance processes, including security questionnaires and due diligence requests, while also managing vendor risk across third-party systems and integrations.

You will develop internal compliance awareness through training and provide regular updates to leadership on risk exposure, compliance status, and recommended actions.

Who You Are

You bring over eight years of experience in GRC, compliance, or information security, including leadership experience in building or managing compliance functions. You have worked in high-growth B2B SaaS environments and are familiar with scaling compliance programs from the ground up.

You have deep experience with SOC 2 Type II audits and are familiar with frameworks such as GDPR, CCPA, NIST, and ISO 27001. You have a strong technical understanding of cloud infrastructure and SaaS systems, allowing you to work closely with engineering teams.

You are comfortable working hands-on while also thinking strategically, and you can communicate complex risks clearly to both technical and non-technical stakeholders.

Compensation

Compensation ranges from $175,000 to $225,000 annually, adjusted based on experience, qualifications, and employment structure.

Why Join

This role offers the opportunity to build a compliance function from the ground up at a fast-growing company operating at scale. You will be joining at a stage where the product is established, growth is strong, and the direction of the company is still being shaped.

‍