--- title: 'Information Security and GRC Manager at Scribe' canonical: 'https://feeny.ai/job/information-security-and-grc-manager-scribe-san-francisco-amdnrces8z8z' type: 'job' last_seen: '2026-10-14' --- # Information Security and GRC Manager at Scribe - **Company:** Scribe - **Location:** San Francisco, CA - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-10-09 - **Last confirmed live:** 2026-10-14 - **Apply:** https://jobs.ashbyhq.com/scribe/61a5a38d-1082-45d6-b302-40cf547e960b ## Job description Howdy, I'm [JJ](https://www.linkedin.com/in/jjnasca/), Scribe's Head of Legal! I spend my days making sure the promises Scribe makes to customers are ones we can keep, and I'm looking for the person who makes sure our security team keeps them too. We take the work seriously but not ourselves, and I think the best colleagues still have time for hobbies and families (and the occasional unread Slack!). I'm invested in making sure you grow your expertise and your career with the function the whole way. Come do the best work of your career with me! ## About Scribe [Scribe](https://scribe.com/) is where exceptional people come to do the best work of their careers. More than 94% of the Fortune 500 use Scribe to own their specialized intelligence: the unique way their teams work, decide, and get things done. Our Specialized Intelligence platform automatically captures how work happens and turns it into a living asset for people and AI agents. We're growing fast. Since our founding in 2019, we've reached 7 million users across 600,000 businesses. Based in San Francisco, we're a LinkedIn Top Startup, valued at over $1B, and backed by leading investors. Join us in our mission to transform how people work. ✨ TL;DR - Why This Role Matters Scribe is scaling fast, and our security and compliance program needs to keep up. As Information Security & GRC Manager, you'll be the hands-on owner of day-to-day security and compliance work. That means running our SOC 2 program, handling enterprise security reviews, driving remediation with Engineering, and operating our core internal controls. If this seat is empty, audits slip, security questionnaires pile up, enterprise deals wait on answers, and compliance requirements never become real engineering work. 📌 About the Role As Information Security & GRC Manager, you'll execute and operate Scribe's security and compliance program across assurance, customer security, risk management, and internal security operations. Concretely, you'll: - Run our SOC 2 program end to end. This covers control ownership, evidence collection, auditor management, and closing gaps, so that our compliance reflects real security practice rather than paperwork. You'll also support additional frameworks as customer demand requires. - Own customer security reviews. You'll complete questionnaires, maintain our trust center and security documentation, and lead security calls alongside Sales, Customer Success, and Legal. - Give Legal technical input on the security commitments in customer contracts (MSAs, DPAs, BAAs, AI terms), and flag non-standard requests for a decision. - Maintain the risk register, security policies, and vendor security review process. When you see risks, bring them to leadership with clear recommendations, and say what needs fixing now and what can reasonably wait. - Turn audit findings, control requirements, and security issues into concrete engineering work, and track that work to completion. - Operate and scale core internal security programs: access reviews, security awareness training, endpoint and device management, vulnerability management, and incident response readiness. 🧩 What Makes You a Great Fit - 6+ years of experience in information security, GRC, or security compliance at a SaaS or technology company with 2+ years managing individual contributors. - Hands-on experience running SOC 2 Type II audits, as the person who actually did the work rather than an occasional contributor. - Experience handling enterprise customer security reviews and questionnaires alongside Sales, Customer Success, and Legal. - Enough working knowledge of cloud security, identity and access management, endpoint security, and vulnerability management to engage credibly with engineers and push remediation forward. - Familiarity with GRC automation platforms (e.g., Vanta, Drata, Secureframe). - Sound judgment about risk: you can tell what needs immediate attention from what can wait, and you escalate the right things. - Strong organization and follow-through, and comfort working without a large team around you. - Experience with information security and privacy frameworks like ISO 27001, HIPAA, FERPA, public-sector requirements, and AI governance frameworks (e.g., EU AI Act, ISO 42001). - CISSP, CISM, or CISA certification preferred. If you're reading this thinking "that's me!", we want to meet you! 🚫 This Role Is Not for You If - You don't have experience scaling or executing on a security team at a global SaaS or technology company. - You haven't personally engaged in commercial/GTM negotiations and other processes, or run audits, answered security questionnaires, or driven remediation work. - You treat every finding as requiring maximum mitigation regardless of business context. - You need a fully defined playbook. The program is still maturing, and you'll help build the processes you run. ## Why you'll love working here - The reach of a unicorn, the headcount of a startup. We went from $1M to $100M ARR in under four years, with fewer than 200 people. That means more pie than people: scope grows with your impact. Customers like T-Mobile, LinkedIn, HubSpot, New York Life and Northern Trust run on Scribe, so what you own reaches some of the biggest names in business. - Hard problems, real impact. Capturing how work actually gets done, at scale, is the foundation AI needs, and it's hard to get right. You'll build the layer other products and agents run on, in a category we're still defining. - Smart is the floor. Kind is the bar. Low ego, high standards. We compete as a collective and love to see each other win, and One Team, One Dream is one of the most shouted-out values in #values. ## Compensation & Location Salary and office requirements vary by location. All full-time employees receive equity in Scribe. Final offers depend on experience and scope. Hybrid, based in San Francisco. We work from the office 3 days per week, with Mondays and Wednesdays being anchor days. ## Benefits - Healthcare Coverage – Comprehensive health, dental, and vision plans, including two $0/month medical plan options for employees - Equity – Ownership in what we're building - 401(k) Plan – through Vestwell - Flex Benefit – $500/year for home office equipment, productivity tools, learning & development or fitness/wellness - Commuter Benefits – $100/month for SF based employees - PTO – Flexible paid time off and company holidays - Parental Leave – Paid leave to support growing families - Wellness & Family Support – Free Talkspace membership, One Medical access (location-dependent), and Kindbody discounts for family planning At Scribe, we celebrate our differences and are committed to creating a workplace where all employees feel supported and empowered to do their best work. Scribe is proud to be an Equal Opportunity Employer. ## About Scribe ## Company Overview - **One-liner**: Scribe is an AI-powered platform that automatically captures, documents, and shares workflows, providing the missing context for teams and AI agents to operate efficiently. - **Entity Type**: Private (Series B) - **Headquarters**: San Francisco, California, USA (with employees across 3 continents) - **Founded**: 2020 - **Founders**: Jennifer Smith (CEO) and Aaron Podolny ## Core Business - Primary industry: Workflow documentation, AI-powered process intelligence, and enterprise knowledge management - Target customers: B2B, serving both SMBs and large enterprises (94% of the Fortune 500 are customers) - Mission: "To unleash and uplevel the world's know-how" — making it automatic for the "go-to person" on every team to share how they get things done ## Products & Services - **Scribe Platform**: An AI-powered tool that automatically captures step-by-step workflows as users work, transforming institutional knowledge into documentation, guides, and context that both human teams and AI agents can read. - **Scribe AI**: A suite of AI features that analyzes workflows to surface bottlenecks, redundancies, and time drains; provides data-backed recommendations for automation; and gives AI tools (like agents and copilots) the workflow context they need to perform 71% better. - **Workflow Intelligence**: A product that helps enterprises build their AI roadmap in days by identifying exactly where AI and automation will have the biggest impact and proving ROI. ## Market Standing - **Valuation**: $1.3 billion (as of early 2026, per Fortune reporting) - **Key Metric**: Total funding raised of $130M; YoY revenue growth of 300% - **Notable Investors/Partners**: Not explicitly named in search results, but the company is backed by prominent venture capital firms (early backers mentioned on the about page) - **Growth Signals**: - 6 million+ users and hundreds of thousands of organizations - 94% of the Fortune 500 are customers - 100+ employees across 3 continents - 35 hours saved per person per month for Pro Team & Enterprise customers - 98% of customers say they make fewer mistakes - 95% of leaders say Scribe enables them to do more with less - 12x faster documentation creation ## Competitive Advantages - **Network effects**: Every workflow captured enriches the platform's AI models, making recommendations smarter for all users - **Enterprise-grade security**: Meets SOC 2 Type II, HIPAA, CCPA, GDPR, FERPA, and other compliance standards, with automatic redaction of sensitive data - **AI-native architecture**: Purpose-built to provide context to both human teams and AI agents, solving the "context gap" that limits AI agent adoption in enterprises - **Zero-friction capture**: Documentation happens automatically as users work — no manual steps, no interrupting workflow - **High switching costs**: Becomes the "single source of truth" for all organizational processes, deeply embedded in daily operations ## Strategic Focus - **AI transformation**: Helping enterprises build their AI roadmap in days by measuring exactly where AI and automation will have the biggest impact - **Context for AI agents**: Positioned as the platform that gives AI tools the workflow context they've been missing — a critical enabler for enterprise AI agent adoption - **Scaling the best ways of working**: Ensuring best practices are followed consistently across teams and tools - **International expansion**: Already operating across 3 continents, with continued hiring globally ## Why Work Here - **Culture and values**: Strong emphasis on six core values that drive decisions daily: Accelerate Impact, Rapid Learning Machine, Raise the Bar, Clear is Kind, Make Our Users Heroes, One Team One Dream. These aren't "corporate buzzwords" — they are used regularly in meetings and decision-making. - **High agency, low ego**: Described as a place with no micromanagement, no ego — just "thoughtful, humble, incredibly driven teammates." - **Recruiting as a strategic advantage**: Talent is treated as foundational, not transactional. Hiring managers partner deeply with recruiting from day one. The bar is high but never lowered, even as headcount doubles. - **Rapid growth trajectory**: 300% YoY revenue growth and a $1.3B valuation mean employees are building at scale with significant resources and impact. - **Remote/hybrid policy**: Not explicitly stated, but the company has employees across 3 continents, suggesting a distributed or hybrid model. - **Mission-driven work**: Employees are united by a mission to "uplevel how people do work" and make every team member more effective. ## Sources 1. [scribe.com](https://scribe.com/) — Main product site with customer stats and value proposition 2. [scribe.com/about](https://scribe.com/about/) — Company mission, history, and values 3. [scribe.com/careers](https://scribe.com/careers) — Careers page with culture, values, and growth metrics 4. [scribe.com/library/what-its-like-to-recruit-at-scribe](https://scribe.com/library/what-its-like-to-recruit-at-scribe) — Internal recruiting blog post detailing culture and hiring philosophy 5. [fortune.com](https://fortune.com/2026/scribe-1.3-billion-valuation-ai-workflow/) — Fortune article: "Scribe hits $1.3B valuation as it moves to show where AI will actually pay off" ## Other roles at Scribe - [Senior Database Reliability Engineer](https://feeny.ai/job/senior-database-reliability-engineer-scribe-remote-e133st8xvp29) - [GTM Operations Manager, Enablement](https://feeny.ai/job/gtm-operations-manager-enablement-scribe-united-states-m9grn497w8d9) — United States - [Senior DevOps Engineer](https://feeny.ai/job/senior-devops-engineer-scribe-remote-crhg4g7vg1t6) - [Senior Full-Stack Engineer](https://feeny.ai/job/senior-full-stack-engineer-scribe-united-states-vvgdt0jhc55f) — United States - [Senior Backend Engineer](https://feeny.ai/job/senior-backend-engineer-scribe-united-states-gzf8abmrr0n5) — United States - [Engineering Manager, QA](https://feeny.ai/job/engineering-manager-qa-scribe-remote-dygwtzd51qny) - [Account Executive, SMB](https://feeny.ai/job/account-executive-smb-scribe-san-francisco-t2dqhzsa2fnx) — San Francisco, CA - [Sales Development Representative](https://feeny.ai/job/sales-development-representative-scribe-san-francisco-yxxevamwzdkg) — San Francisco, CA - [Account Executive, Emerging Enterprise Expansion](https://feeny.ai/job/account-executive-emerging-enterprise-expansion-scribe-united-states-f6a0p742742g) — United States - [Solutions Engineer](https://feeny.ai/job/solutions-engineer-scribe-san-francisco-051g2v4081h4) — San Francisco, CA