---
title: 'Security Assurance & GRC Lead at Wispr Flow'
canonical: 'https://feeny.ai/job/security-assurance-grc-lead-wispr-flow-san-francisco-or-hbf0vqn68tan'
type: 'job'
last_seen: '2026-11-07'
---

# Security Assurance & GRC Lead at Wispr Flow

- **Company:** Wispr Flow
- **Location:** San Francisco OR, NY
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-09-16
- **Last confirmed live:** 2026-11-07
- **Apply:** https://jobs.ashbyhq.com/wispr-flow/1118be18-5b7c-44ac-9e9b-e26ac02d592a

## Job description

## About Wispr

Wispr is an AI research and product company building the voice interface for computing. AI can now reason, code, and act. Yet, humans still do the work of the interface. [We think that’s backwards.](https://wisprflow.ai/post/the-master-plan)

Our first products are Flow, which lets you speak naturally in any application, and Notetaker, which builds context across conversations. We’re building toward an interface that can perceive, understand, and take action with earned trust. That means solving hard problems across models, systems, and product - and caring about the final human experience as deeply as the technology underneath it.

We’re a talent-dense team that holds strong opinions, tests them quickly, and builds technology that sparks joy. Our goal is to build the first voice interface used every day by a billion people.

## About the role

Wispr Flow is hiring a Security Assurance & GRC Lead to own our customer assurance and compliance programs and decide where they go next. You'll set the GRC roadmap across SOC 2, ISO 27001, privacy, and enterprise customer requirements, and build systems that let the program scale faster than request volume.

You'll work closely with our vCISO and with Engineering, Product, Legal, Sales, Customer Success, and Support. Much of the role is customer-facing: you'll lead security conversations with sophisticated buyers, represent our posture accurately (including being direct about gaps), and know when to pull in deeper expertise. On our largest deals you'll engage early, identify likely blockers, and have a plan before the questionnaire arrives. You're the DRI for high-priority security and assurance escalations. The goal: security becomes a reason customers choose us.

## What you'll do

- Own the GRC roadmap. Define priorities across SOC 2 Type II, ISO 27001, customer requirements, privacy, and risk management. Enterprise blockers come first, with everything else sequenced by business impact.
- Lead customer assurance end-to-end. Represent Wispr Flow on calls, in security reviews, and in written responses. Own questionnaires, due-diligence requests, vendor assessments, and RFP security sections through completion, and drive cross-functional resolution on escalations. Never make claims the evidence doesn't support.
- Get ahead of strategic deals. Engage early on major opportunities, anticipate objections, and build a security plan with Sales.
- Make security a GTM advantage. Improve the Trust Center, standard responses, and security narratives so customers can self-serve and our posture is easy to understand.
- Build the system, not just run it. Track turnaround times, recurring objections, and repetitive work, then standardize and automate. Keep Drata, SafeBase, and Linear accurate.
- Develop the team. Partner with our compliance engineer to build the operating processes together, strengthening process design, prioritization, and follow-through while drawing on their technical and compliance expertise.
- Feed reviews back into the product. Turn patterns from security reviews into structured input for Product and Engineering on SSO/SCIM, audit logs, permissions, retention, data residency, and AI/data handling.
- Own the AI security narrative. Customers will ask about model providers, training and data usage, retention, subprocessors, and how their data moves through our system. Answer those questions and keep the answers current as the product changes. When incidents happen, coordinate clear, accurate customer-facing communication (you won't own incident response itself).
- Keep compliance running. Coordinate audit evidence, track deadlines, maintain controls and policies, drive remediation, and keep the risk register, vendor inventory, and compliance calendar current.

## What we're looking for

- Depth in GRC, security compliance, customer assurance, IT audit, or risk management, with enough range to own both the program and the customer conversation.
- Experience leading customer security reviews and explaining security to technical and non-technical audiences.
- Working knowledge of SOC 2, ISO 27001, or similar frameworks, and the ability to turn them into a practical roadmap.
- Judgment: what's a material enterprise blocker vs. what can wait, and what you can answer yourself vs. what needs escalation.
- A track record of creating structure around manual or ambiguous work and improving the systems behind it.
- Strong written and verbal communication on risk, posture, and technical constraints, plus the project-management discipline to drive cross-functional work to completion.
- Comfort working across Engineering, Product, IT, Legal, Sales, Customer Success, and Support, and willingness to do operational work while reducing it over time.

## Nice to have

- Startup or growth-stage SaaS experience supporting enterprise customers.
- Experience establishing or scaling a compliance or customer assurance program.
- Familiarity with Drata, Vanta, SafeBase, or similar tools, and with standard questionnaires (SIG, CAIQ, HECVAT, VSAQ).
- Working knowledge of cloud security, access control, encryption, logging, vulnerability management, incident response, and SaaS architecture.
- Familiarity with AI security and privacy: model providers, training and data usage, retention, subprocessors, data flows, access boundaries.
- Exposure to GDPR, CCPA, HIPAA, data residency, or vendor-risk management.
- Experience building automations or integrations for compliance work.
- Security+, CISA, CGRC, ISO 27001 Lead Implementer, or similar certification.

What success looks like in the first six months

- You own the customer assurance motion end-to-end: strategic reviews, customer calls, questionnaires, escalations, and follow-through.
- There's a clear GRC roadmap that leadership has signed off on and you're driving.
- Security-review turnaround time has dropped materially, with more work standardized, automated, or self-served through the Trust Center.
- Leadership has a current view of our biggest security risks and enterprise blockers, with owners and plans for the ones that matter most.

Logistics We sponsor H1B, O1, EB1, L1, STEM OPT, and more. We can't guarantee sponsorship for every role, but if we make you an offer we'll make every reasonable effort, with help from our immigration law firm.

We strongly encourage you to apply even if you don't meet every qualification. The strongest candidates we meet rarely do, so don't exclude yourself prematurely. We're rethinking how humans interact with AI, and doing that well demands diversity of perspective and experience.

We're committed to a fair and accessible interview process. If you need any accommodations or adjustments, please let us know.

## About Wispr Flow

## Company Overview
- **One-liner**: Wispr Flow develops voice-to-text AI technology that lets users dictate content naturally across applications, aiming to replace keyboards with voice for faster, more effortless communication.
- **Entity Type**: Private (Series A – II)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2021
- **Founders**: Not publicly available

## Core Business
- **Primary industry**: AI-powered voice interface / voice dictation
- **Target customers**: B2C (individuals) and B2B (teams, lawyers, accessibility users)
- **Mission**: “Make interacting with your devices as effortless as talking to a close friend” and “create a world where people enjoy more clarity, connection, and agency – with less screen time, context-switching, and cognitive overload.”

## Products & Services
- **[Flow](https://wisprflow.ai/)**: A consumer voice dictation platform that works across Mac, Windows, iPhone, and Android. It transcribes speech 4× faster than typing, includes AI auto-edits (removes filler words, formats text), supports 100+ languages, and learns a personal dictionary. Available as a free 14-day trial.
- **Flow for Teams**: Adds snippet libraries, voice shortcuts, and team‑wide settings.
- **Flow for Lawyers**: Tailored formatting and legal‑specific commands.
- **Flow for Accessibility**: Designed to help users who cannot rely on traditional input methods.

## Market Standing
- **Valuation / Market Cap**: Not disclosed
- **Key Metric**: Total funding raised – **$81.6M** (latest round: Series A – II, raised $25M)
- **Notable Investors**: Notable Capital, Menlo Ventures, Activate, Flight Fund, Peak XV Partners, plus 31 other institutional investors. Individual backers include Rakesh Mathur (CEO, Superhuman), Rahul Vohra (CEO, Superhuman), Fred Ehrsam (Founder, Coinbase), and others.
- **Growth Signals**: “Flow became the first consumer voice dictation platform that makes people want to use voice more than their keyboards.” The product is already available on four platforms, supports 100+ languages, and the company has filed 9 patents (e.g., silent speech interaction systems). Headcount is estimated at over 200 employees [cbinsights.com](https://www.cbinsights.com/company/wispr).

## Competitive Advantages
- Works **across any application** (native on Mac, Windows, iOS, Android) – not locked to a single app.
- **AI auto-edits** turn rambled speech into clean, formatted text without manual correction.
- **4× faster than typing** and supports a personal dictionary that learns unique words.
- Strong **patent portfolio** covering natural language processing, computational linguistics, and silent speech.

## Strategic Focus
- Rethinking the fundamental layer of computing: moving from screen‑first to **voice‑first** interfaces.
- Expanding from dictation into broader voice‑based interaction tools (e.g., silent speech, AI commands).
- Building a platform that is both **useful** (trustworthy) and **ubiquitous** (available everywhere).

## Why Work Here
- **Culture**: Values include “unreasonably ambitious and self‑improving,” “kind and direct,” “truth seeking,” “opinionated about simplicity,” and “tuned into emotion.” The team is described as designers, AI researchers, and engineers who want to “have fun” while building ambitious products.
- **Work environment**: HQ in San Francisco, but **open to remote**. Visa‑friendly and relocation assistance available.
- **Perks**: Health/dental/vision insurance, unlimited PTO (encouraged to take days off), generous parental leave, visa assistance, 401k match, commuter benefits, relocation assistance.
- **Engineering culture**: Focus on first‑principles thinking, simplicity, and delight. “Don’t see a role that fits? Email us your resume” – open to unsolicited applications.

## Sources
1. [wisprflow.ai – About](https://wisprflow.ai/about)
2. [wisprflow.ai – Careers](https://wisprflow.ai/careers)
3. [wisprflow.ai – Homepage](https://wisprflow.ai/)
4. [cbinsights.com – Wispr Flow Company Profile](https://www.cbinsights.com/company/wispr)
5. [jobs.ashbyhq.com – Wispr Flow Jobs](https://jobs.ashbyhq.com/wispr-flow)

## Other roles at Wispr Flow

- [Content Product Marketer](https://feeny.ai/job/content-product-marketer-wispr-flow-san-francisco-6bh2tybskkpx) — San Francisco, CA
- [Platform Engineer, Developer Experience](https://feeny.ai/job/platform-engineer-developer-experience-wispr-flow-san-francisco-t7was6e2dkdf) — San Francisco, CA
- [GTM Engineer](https://feeny.ai/job/gtm-engineer-wispr-flow-san-francisco-c45nsyxev4w3) — San Francisco, CA
- [System Architect, New Products](https://feeny.ai/job/system-architect-new-products-wispr-flow-san-francisco-4k98m46tjy74) — San Francisco, CA
- [Product Engineer, New Products](https://feeny.ai/job/product-engineer-new-products-wispr-flow-san-francisco-84rgnmh78td7) — San Francisco, CA
- [Lead SDET](https://feeny.ai/job/lead-sdet-wispr-flow-san-francisco-v50r51j7mbwe) — San Francisco, CA
- [Revenue Operations](https://feeny.ai/job/revenue-operations-wispr-flow-san-francisco-r0v15k5tsk7s) — San Francisco, CA
- [AI Engineer, Internal Systems](https://feeny.ai/job/ai-engineer-internal-systems-wispr-flow-san-francisco-m23gyqyg0yzr) — San Francisco, CA
- [Product Engineer, Systems Architect](https://feeny.ai/job/product-engineer-systems-architect-wispr-flow-san-francisco-6rss1vzka9es) — San Francisco, CA
- [Product Engineer, Enterprise](https://feeny.ai/job/product-engineer-enterprise-wispr-flow-san-francisco-3sjcbvaam1cs) — San Francisco, CA