About the role
About Enterpret At Enterpret, we are building a customer feedback intelligence platform that turns unstructured feedback into a structured, queryable source of truth for product development teams — solving complex problems in natural language processing, serverless computing, and analytics, and pushing the envelope of what's possible by applying first principle thinking. Kleiner Perkins and Sequoia Capital share our conviction and back us. Some of the most respected product development teams in the world — Canva, Notion, Samsung, and Loom — trust Enterpret with their customer feedback. We love working with folks who are resourceful, thrive in ambiguity, and display a strong sense of ownership. Read more about our team, core values, and operating principles - here .
The Role This is a Founder's Office role embedded in EPD (Engineering, Product & Design). Roughly 60–70% of the work is technical program management across EPD initiatives — tracking them closely and driving them to done — and 30–40% is owning our GRC and audit program . Because audits are calendar-driven, GRC peaks around certification cycles, leaving the rest of the year for broader program management across the org. You'll work hand-in-hand with the Chief of Staff and the founding team.
What You'll Do? Program-Manage EPD Initiatives (primary): Drive and track initiatives across Engineering, Product & Design end-to-end — run Agile ceremonies, sprint planning, and Linear hygiene; manage roadmaps, dependencies, and timelines; and surface status, risks, and blockers to leadership. Be an Extension of the Founder's Office: Partner closely with the Chief of Staff and founding team to turn strategy into tracked execution, herd cross-functional programs to done, and keep leadership clear-eyed on what's on track and what's slipping. Own the GRC & Audit Calendar (~30–40%): Own audits end-to-end — SOC 2 today, ISO 27001 and GDPR next — across scoping, control testing, evidence collection, auditor coordination, and remediation, building a continuous, risk-based program rather than a once-a-year fire drill. Control Design & Cross-Framework Mapping: Maintain policies, risk registers, and control narratives; map controls once across SOC 2, ISO 27001, 42001, NIST CSF, GDPR emerging AI-governance frameworks; and partner with engineering to implement practical controls across cloud, SDLC, IAM, logging, monitoring, and incident response. Customer Trust & Enterprise Enablement: Own security reviews, questionnaires, and trust documentation that unblock enterprise sales and partnerships with customers like Canva, Notion, and Samsung. Build the Operating Cadence: Stand up the rituals, dashboards, and tooling — Linear for delivery; Vanta, Drata, or Secureframe for continuous compliance — that keep both program delivery and compliance posture visible and scalable. What It Takes? 5+ years in technical program management within an engineering/product organization, including hands-on ownership of a compliance or audit program (SOC 2 or similar). 2+ years at one organization driving cross-functional EPD programs end-to-end and/or standing up a compliance program from scratch — owning outcomes, not just status decks. Fluency running Agile/Scrum, sprint planning, and roadmap tracking in Linear (or Jira) , with a track record of herding complex, multi-team initiatives to done. Hands-on depth across SOC 2 Type II and ISO 27001 , with working knowledge of NIST CSF, GDPR, and emerging AI-governance frameworks (ISO 42001, NIST AI RMF) and GRC/continuous-compliance tooling (Vanta, Drata, Secureframe). A track record of partnering across Engineering, Product, and Design and operating as a trusted extension of the founding team or Chief of Staff. Comfort building 0-to-1 in a fast-moving environment — creating the frameworks, rituals, and playbooks that scale where none exist yet. Program-management or GRC certifications (CSM, PMP, CISA, CISM, CISSP, ISO 27001 Lead Auditor) are a plus. Why Enterpret? High Impact: Sit in the Founder's Office and turn EPD strategy into tracked execution — while standing up the compliance foundation that wins enterprise trust. Ownership: End-to-end responsibility for features and systems. Complex Challenges: Juggle a portfolio of EPD programs and a multi-framework compliance roadmap on modern cloud and ML infrastructure. Growth: Learn and grow with a high-caliber team and expand into broader program leadership, founder's office, or deep GRC expertise. Culture: Open, collaborative, and values-driven environment with autonomy.