Senior GRC Analyst, Doppel
CA$120-140k
+ Equity
Online brand protection and anti-phishing platform
Be an early applicant
Online brand protection and anti-phishing platform
101-200 employees
Be an early applicant
CA$120-140k
+ Equity
101-200 employees
Company mission
To leverage AI to find and take down threats across social media, crypto, domains, and app stores.
Role
Who you are
- 5–7+ years in GRC, audit, or risk. At least 3+ years leading ISO 27001 certification/surveillance cycles and SOC 2 Type II audits; hands‑on experience with ISO 27701 and ISO 42001 or equivalent AI governance programs
- Proven ownership of SOC 2 programs (scope, controls, evidence, auditor management) and continuous compliance in cloud‑first environments (AWS/Azure/GCP, SaaS)
- Strong command of management systems (ISMS/PIMS/AIMS), Trust Services Criteria, control testing, sampling, and evidence sufficiency
- Practical experience running access certifications, vendor risk reviews, and customer security questionnaires/RFPs at scale
- Familiarity with privacy and data governance (GDPR/CPRA), and secure SDLC/change management
- Comfortable with GRC tooling and automation, ticketing and collaboration workflows, and basic scripting/queries to pull evidence when needed
- Clear communicator who can instill a culture of accountability
What the job involves
- We’re seeking a Senior Governance, Risk & Compliance (GRC) Analyst to lead our certification and assurance programs, owning SOC 2 end‑to‑end and driving ISO 27001, ISO 27701, and ISO 42001 audit preparation and ongoing maintenance
- You’ll be the program lead partnering with Security, Engineering, IT, Legal, and Sales to keep controls effective, risks managed, and customer trust high
- Lead audits & certifications: Own preparation, execution, and ongoing maintenance for ISO 27001, ISO 27701, ISO 42001, and SOC 2, including gap analyses, remediation, evidence collection, auditor coordination, and management system documentation
- Manage enterprise risk: Operate the security and enterprise risk program, maintain the risk register, perform system/vendor/AI risk assessments, and drive remediation and risk acceptance processes
- Ensure control effectiveness: Design and execute control testing, track exceptions and corrective actions, and streamline compliance across frameworks (ISO, SOC 2, NIST, GDPR/CPRA, PCI, HIPAA/HITRUST)
- Oversee access governance: Lead periodic access reviews, enforce least-privilege and joiner/mover/leaver controls, and monitor privileged account usage
- Drive vendor & third-party risk management: Conduct due diligence, risk tiering, contract security/privacy requirements, and ongoing monitoring of critical suppliers and partners
- Support customer trust: Own security and privacy questionnaires, RFP responses, and Trust Center content; engage with customers and sales teams to communicate our security posture
- Advance governance & privacy: Maintain the policy lifecycle, role-based training, and privacy processes
- Enhance resilience & reporting: Support incident response exercises, business continuity/disaster recovery testing, and deliver dashboards/metrics on risks, controls, access reviews, vendor posture, and audit readiness
Our take
While the NFT space is often one that is enticing to investors and traders, there are persistent issues with fraud in the market. Cybercriminals are able to pass off any image as their own intellectual property, and while NFT marketplaces do abide by copyright laws this kind of fraud can be hard to spot before money changes hands. The damage to a brand's reputation and customer trust can be hard to rectify.
Doppel exists to solve this problem. Using an AI model trained to spot fraud and IP violations, it indexes NFT data across most of the major blockchains and flags potentially fraudulent NFTs. Trusted by Opensea, Dapper and numerous other marketplaces, Doppel scans over 1.5 million NFTs daily and has identified over 100,000 threats in the marketplace.
Doppel has raised significant funding, its 2024 round is being used to develop its AI-driven platform further. While the NFT sector as a whole is going through a turbulent time, the applications of NFTs in new areas such as gaming and ticketing are not going unnoticed. Doppel wants to achieve continuous monitoring and rapid detection across more platforms, expanding its web and social media range into the dark web, crypto and encrypted messaging services like Telegram.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 3 rounds)
May 2025
$35m
SERIES B
Jan 2024
$14.4m
SERIES A
Total funding: $54.4m
Company benefits
- Health, dental, & vision stipend
- Flexible vacation and work arrangements
- Generous equity
Company HQ
San Carlos, CA
Leadership
Kevin Tian
(CEO & Co-Founder)Previously founded Ferryhome. Before that was Staff Engineer & Engineering Manager at Lyft and Senior Software Engineer with Uber.
Rahul Madduluri
(CTO & Co-Founder)Before co-founding Doppel was the Co-founder & CTO of YakPak and Software Engineer at Uber.
Share this job
View 8 more jobs at Doppel