Information Security and GRC Manager

Howdy, I'm JJ, Scribe's Head of Legal! I spend my days making sure the promises Scribe makes to customers are ones we can keep, and I'm looking for the person who makes sure our security team keeps them too. We take the work seriously but not ourselves, and I think the best colleagues still have time for hobbies and families (and the occasional unread Slack!).

I'm invested in making sure you grow your expertise and your career with the function the whole way. Come do the best work of your career with me!

About Scribe

Scribe is where exceptional people come to do the best work of their careers. More than 94% of the Fortune 500 use Scribe to own their specialized intelligence: the unique way their teams work, decide, and get things done. Our Specialized Intelligence platform automatically captures how work happens and turns it into a living asset for people and AI agents.

We're growing fast. Since our founding in 2019, we've reached 7 million users across 600,000 businesses. Based in San Francisco, we're a LinkedIn Top Startup, valued at over $1B, and backed by leading investors. Join us in our mission to transform how people work.

**✨ TL;DR - Why This Role Matters
**Scribe is scaling fast, and our security and compliance program needs to keep up. As Information Security & GRC Manager, you'll be the hands-on owner of day-to-day security and compliance work. That means running our SOC 2 program, handling enterprise security reviews, driving remediation with Engineering, and operating our core internal controls. If this seat is empty, audits slip, security questionnaires pile up, enterprise deals wait on answers, and compliance requirements never become real engineering work.

**📌 About the Role
**As Information Security & GRC Manager, you'll execute and operate Scribe's security and compliance program across assurance, customer security, risk management, and internal security operations. Concretely, you'll:

• Run our SOC 2 program end to end. This covers control ownership, evidence collection, auditor management, and closing gaps, so that our compliance reflects real security practice rather than paperwork. You'll also support additional frameworks as customer demand requires.

• Own customer security reviews. You'll complete questionnaires, maintain our trust center and security documentation, and lead security calls alongside Sales, Customer Success, and Legal.

• Give Legal technical input on the security commitments in customer contracts (MSAs, DPAs, BAAs, AI terms), and flag non-standard requests for a decision.