Compliance Manager
Content + Source + Freshness • 11 Dec 2025 • 95% confidence
Offer value
A well-compensated role in compliance management with significant responsibility and influence over organizational security standards.
- Competitive salary: $180,000–$250,000/year
- Influence over compliance and security for major enterprises
- Entry into a stable and growing technology sector
- Requires practical knowledge of complex compliance frameworks.
Pros
- Attractive salary range ($180K - $250K) in a growing industry.
- Direct impact on customer trust and enterprise security.
- Engagement with top-tier clients and major compliance certification processes.
Cons
- High-pressure environment with complex compliance requirements.
- May involve tight deadlines and project timelines.
- Coordination with multiple teams may lead to conflicting priorities.
Who it's for
Mid to Senior Level • On-site
Good fit
- GRC professionals with a strong commitment to compliance
- Individuals looking to enhance their expertise in enterprise security.
- Candidates motivated by ensuring customer trust through compliance.
Not recommended for
- Those without experience in compliance roles
- Professionals seeking technical roles focus rather than compliance
- Individuals uncomfortable with high responsibility.
Motivation fit
Key skills
About the job
Location
San Francisco
Employment Type
Full time
Department
Engineering, Product & Design
Compensation
- Base Salary $180K – $250K • Offers Equity
About Decagon
Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experience. Our AI agents provide intelligent, human-like responses across chat, email, and voice, resolving millions of customer inquiries across every language and at any time.
Since coming out of stealth, Decagon has experienced rapid growth. We partner with industry leaders like Hertz, Eventbrite, Duolingo, Oura, Bilt, Curology, and Samsara to redefine customer experience at scale. We've raised over $200M from Bain Capital Ventures, Accel, a16z, BOND Capital, A*, Elad Gil, and notable angels such as the founders of Box, Airtable, Rippling, Okta, Lattice, and Klaviyo.
We’re an in-office company, driven by a shared commitment to excellence and velocity. Our values—customers are everything, relentless momentum, winner’s mindset, and stronger together—shape how we work and grow as a team.
About the Team
The Security Engineering team at Decagon protects the platform that powers the most advanced conversational AI agents for enterprise customers across voice, chat, email and SMS. We build the security foundations that enable Decagon's AI agents to handle sensitive customer data with complete trust while defending against sophisticated, AI-enabled threats at massive scale.
Our mission is to secure magical support experiences, ensuring that AI agents and human agents can collaborate safely to help users resolve their issues while maintaining the highest standards of security and privacy.
About the Role
Join Decagon as a Senior GRC Analyst and play a critical role in securing customer trust as we scale to serve Fortune 500 and international enterprises. Working closely with the head of security and compliance, you'll be responsible for the day-to-day execution of our compliance program and customer security engagements. This is a high-impact role where you'll directly contribute to closing enterprise deals by efficiently managing security communications with customers, supporting compliance audits, and improving our security documentation. Perfect for someone who thrives in a high impact organization with attention to detail, excellent writing skills, and who wants to build expertise in enterprise AI compliance.
In this role, you will
Drive compliance certifications including SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, and CCPA
Automate or execute compliance evidence collection, ensuring all controls are properly documented and audit-ready
Maintain and improve security documentation including policies, procedures, and customer-facing security collateral
Support customer security assessments by preparing materials for security reviews and helping address technical inquiries from Fortune 500 security teams
Manage security and compliance topics in RFPs end-to-end, coordinating responses across engineering, product, and legal teams to deliver accurate, timely responses to enterprise customers.
Coordinate with contractors and vendors to maintain response quality and meet timelines during peak sales periods
Build and optimize repeatable processes to scale our GRC operations to hundreds of enterprise customers
Partner with sales engineering to understand customer security requirements and proactively prepare responses for common concerns
Partner with Sales and Customer Success to accelerate deal velocity by proactively addressing customer security concerns with published content
Collaborate with Security, Engineering, and Product teams to translate compliance requirements into actionable technical controls and ensure new features meet regulatory standards
-
Establish vendor risk management programs to assess and monitor third-party security risks across our supply chain
Your background looks something like this
3-5 years of GRC experience in high-growth SaaS or technology companies, with direct responsibility for compliance programs
Proven track record successfully contributing to SOC 2, ISO 27001, or similar enterprise compliance certifications
Experience in data privacy regulations including CCPA, GDPR, and emerging AI governance frameworks
Strong project management skills with ability to coordinate cross-functional teams under tight deadlines
Excellent written and verbal communication skills to translate complex security concepts for diverse audiences
-
Working knowledge of technical security controls and ability to collaborate effectively with engineering teams
Even better
Experience with AI/ML compliance frameworks and understanding of unique risks in conversational AI systems
Background in healthcare or financial services with knowledge of HIPAA or PCI requirements
Track record of building GRC programs at companies scaling from startup to enterprise
Experience with GRC platforms like Vanta, Drata, or SecureFrame to automate compliance workflows
-
Understanding of cloud security particularly Google Cloud Platform compliance and security features
Benefits:
Medical, dental, and vision benefits
Take what you need vacation policy
-
Daily lunches, dinners and snacks in the office to keep you at your best
Compensation
$140K – $220K + Offers Equity
Compensation Range: $180K - $250K
