Senior GRC Analyst, Doppel
$120-140k
+ Offers Equity
Social engineering defense platform
Job no longer available
Social engineering defense platform
201-500 employees
Job no longer available
$120-140k
+ Offers Equity
201-500 employees
Company mission
To protect the world from social engineering attacks every day.
Role
Who you are
- 5–7+ years in GRC, audit, or risk. At least 3+ years leading ISO 27001 certification/surveillance cycles and SOC 2 Type II audits; hands‑on experience with ISO 27701 and ISO 42001 or equivalent AI governance programs
- Proven ownership of SOC 2 programs (scope, controls, evidence, auditor management) and continuous compliance in cloud‑first environments (AWS/Azure/GCP, SaaS)
- Strong command of management systems (ISMS/PIMS/AIMS), Trust Services Criteria, control testing, sampling, and evidence sufficiency
- Practical experience running access certifications, vendor risk reviews, and customer security questionnaires/RFPs at scale
- Familiarity with privacy and data governance (GDPR/CPRA), and secure SDLC/change management
- Comfortable with GRC tooling and automation, ticketing and collaboration workflows, and basic scripting/queries to pull evidence when needed
- Clear communicator who can instill a culture of accountability
What the job involves
- We’re seeking a Senior Governance, Risk & Compliance (GRC) Analyst to lead our certification and assurance programs, owning SOC 2 end‑to‑end and driving ISO 27001, ISO 27701, and ISO 42001 audit preparation and ongoing maintenance
- You’ll be the program lead partnering with Security, Engineering, IT, Legal, and Sales to keep controls effective, risks managed, and customer trust high
- Lead audits & certifications: Own preparation, execution, and ongoing maintenance for ISO 27001, ISO 27701, ISO 42001, and SOC 2, including gap analyses, remediation, evidence collection, auditor coordination, and management system documentation
- Manage enterprise risk: Operate the security and enterprise risk program, maintain the risk register, perform system/vendor/AI risk assessments, and drive remediation and risk acceptance processes
- Ensure control effectiveness: Design and execute control testing, track exceptions and corrective actions, and streamline compliance across frameworks (ISO, SOC 2, NIST, GDPR/CPRA, PCI, HIPAA/HITRUST)
- Oversee access governance: Lead periodic access reviews, enforce least-privilege and joiner/mover/leaver controls, and monitor privileged account usage
- Drive vendor & third-party risk management: Conduct due diligence, risk tiering, contract security/privacy requirements, and ongoing monitoring of critical suppliers and partners
- Support customer trust: Own security and privacy questionnaires, RFP responses, and Trust Center content; engage with customers and sales teams to communicate our security posture
- Advance governance & privacy: Maintain the policy lifecycle, role-based training, and privacy processes
- Enhance resilience & reporting: Support incident response exercises, business continuity/disaster recovery testing, and deliver dashboards/metrics on risks, controls, access reviews, vendor posture, and audit readiness
Our take
While the NFT space is often one that is enticing to investors and traders, there are persistent issues with fraud in the market. Cybercriminals are able to pass off any image as their own intellectual property, and while NFT marketplaces do abide by copyright laws this kind of fraud can be hard to spot before money changes hands. The damage to a brand's reputation and customer trust can be hard to rectify.
Doppel exists to solve this problem. Using an AI model trained to spot fraud and IP violations, it indexes NFT data across most of the major blockchains and flags potentially fraudulent NFTs. Trusted by Opensea, Dapper and numerous other marketplaces, Doppel scans over 1.5 million NFTs daily and has identified over 100,000 threats in the marketplace.
Doppel has raised significant funding, its 2025 round aimed at accelerating product innovation and expanding its capabilities beyond NFT fraud detection into broader social engineering defense. As AI-driven scams become more sophisticated, the company is ready as a multi-channel security platform, helping organizations detect, prevent, and respond to threats across digital environments.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 3 rounds)
May 2025
$35m
SERIES B
Jan 2024
$14.4m
SERIES A
Total funding: $54.4m
Company benefits
- Health benefits: We’ve got your health covered, so you can focus on what matters.
- Flexible time off: Take the time you need, when you need it.
- Supporting Life's Biggest Job: Because family matters most, we offer paid time off for parents to bond, rest, and adjust to life’s biggest change.
- Perks for Office Days: We make getting to the office (and staying nourished) easier.
- Cell stipend: We make staying in touch a little easier.
- Home office setup: We'll take care of your home office, so you can take care of the work that matters.
Leadership
Kevin Tian
(Co-Founder & CEO)Kevin previously founded Ferryhome. Prior to that, he was a Staff Engineer & Engineering Manager at Lyft and Senior Software Engineer with Uber.
Rahul Madduluri
(Co-Founder & CTO)Prior to co-founding Doppel, Rahul was the Co-founder & CTO of YakPak and a Software Engineer at Uber.
Share this job
View 6 more jobs at Doppel