Founder's Office - Program Manager

About this role

<h3>About Enterpret</h3> <p>At Enterpret, we are building a customer feedback intelligence platform that turns unstructured feedback into a structured, queryable source of truth for product development teams — solving complex problems in natural language processing, serverless computing, and analytics, and pushing the envelope of what's possible by applying first principle thinking.</p> <p>Kleiner Perkins and Sequoia Capital share our conviction and back us. Some of the most respected product development teams in the world — Canva, Notion, Samsung, and Loom — trust Enterpret with their customer feedback.</p> <p>We love working with folks who are resourceful, thrive in ambiguity, and display a strong sense of ownership.</p> <p>Read more about our team, core values, and operating principles - <a href="https://www.enterpret.com/about-us">here</a>.<br><br></p> <h3>The Role</h3> <p>This is a <strong>Founder's Office role embedded in EPD</strong> (Engineering, Product & Design). Roughly <strong>60–70% of the work is technical program management</strong> across EPD initiatives — tracking them closely and driving them to done — and <strong>30–40% is owning our GRC and audit program</strong>. Because audits are calendar-driven, GRC peaks around certification cycles, leaving the rest of the year for broader program management across the org. You'll work hand-in-hand with the Chief of Staff and the founding team.<br><br></p> <h3>What You'll Do?</h3> <ul> <li><strong>Program-Manage EPD Initiatives (primary):</strong> Drive and track initiatives across Engineering, Product & Design end-to-end — run Agile ceremonies, sprint planning, and Linear hygiene; manage roadmaps, dependencies, and timelines; and surface status, risks, and blockers to leadership.</li> <li><strong>Be an Extension of the Founder's Office:</strong> Partner closely with the Chief of Staff and founding team to turn strategy into tracked execution, herd cross-functional programs to done, and keep leadership clear-eyed on what's on track and what's slipping.</li> <li><strong>Own the GRC & Audit Calendar (~30–40%):</strong> Own audits end-to-end — <strong>SOC 2</strong> today, ISO 27001 and GDPR next — across scoping, control testing, evidence collection, auditor coordination, and remediation, building a continuous, risk-based program rather than a once-a-year fire drill.</li> <li><strong>Control Design & Cross-Framework Mapping:</strong> Maintain policies, risk registers, and control narratives; map controls once across SOC 2, ISO 27001, 42001, NIST CSF, GDPR emerging AI-governance frameworks; and partner with engineering to implement practical controls across cloud, SDLC, IAM, logging, monitoring, and incident response.</li> <li><strong>Customer Trust & Enterprise Enablement:</strong> Own security reviews, questionnaires, and trust documentation that <strong>unblock enterprise sales and partnerships</strong> with customers like Canva, Notion, and Samsung.</li> <li><strong>Build the Operating Cadence:</strong> Stand up the rituals, dashboards, and tooling — Linear for delivery; Vanta, Drata, or Secureframe for continuous compliance — that keep both program delivery and compliance posture visible and scalable.<br><br></li> </ul> <h3>What It Takes?</h3> <ul> <li><strong>5+ years</strong> in technical program management within an engineering/product organization, including hands-on ownership of a compliance or audit program (SOC 2 or similar).</li> <li><strong>2+ years</strong> at one organization driving cross-functional EPD programs end-to-end and/or standing up a compliance program from scratch — owning outcomes, not just status decks.</li> <li>Fluency running <strong>Agile/Scrum, sprint planning, and roadmap tracking in Linear (or Jira)</strong>, with a track record of herding complex, multi-team initiatives to done.</li> <li>Hands-on depth across <strong>SOC 2 Type II and ISO 27001</strong>, with working knowledge of <strong>NIST CSF, GDPR, and emerging AI-governance frameworks (ISO 42001, NIST AI RMF)</strong> and GRC/continuous-compliance tooling (Vanta, Drata, Secureframe).</li> <li>A track record of <strong>partnering across Engineering, Product, and Design</strong> and operating as a trusted extension of the founding team or Chief of Staff.</li> <li>Comfort building <strong>0-to-1 in a fast-moving environment</strong> — creating the frameworks, rituals, and playbooks that scale where none exist yet.</li> <li>Program-management or GRC certifications (CSM, PMP, CISA, CISM, CISSP, ISO 27001 Lead Auditor) are a plus.<br><br></li> </ul> <h3>Why Enterpret?</h3> <ul> <li><strong>High Impact:</strong> Sit in the Founder's Office and turn EPD strategy into tracked execution — while standing up the compliance foundation that wins enterprise trust.</li> <li><strong>Ownership:</strong> End-to-end responsibility for features and systems.</li> <li><strong>Complex Challenges:</strong> Juggle a portfolio of EPD programs and a multi-framework compliance roadmap on modern cloud and ML infrastructure.</li> <li><strong>Growth:</strong> Learn and grow with a high-caliber team and expand into broader program leadership, founder's office, or deep GRC…