Governance Risk and Compliance Lead

About this role

About Owner

Owner is the AI-native system local business owners use to succeed, starting with restaurants.

We’re building the system that replaces the many tools owners use to run their business.

It powers everything from the restaurant’s website, online ordering, CRM, POS, and more.

Product philosophy

Most small business software makes owners do the work to get what they want: sales growth and profit growth. Owner does the work for them agentically.

Our system drives demand, converts it, and helps operators run their business day to day. As it improves, the business improves with it.

Using Owner should feel like having a team of great operators, engineers, and marketers working for you.

Our vision

We’re starting by helping independent restaurants succeed online.

But it’s not just restaurants that need our help. Most local businesses are struggling with these same problems. Huge technology corporations are taking their customers, bleeding their profits, and making it hard for them to survive.

Once we nail the solution for restaurants – we’ll scale it into every other local business type.

In the future we envision, tens of millions of local business owners will use our technology to succeed in the digital age.

Read our Series C memo here → https://www.owner.com/c

Our traction

Since 2020, we've generated tens of millions in revenue and processed over a billion dollars of online orders. 1 in 5 Americans have used an Owner.com http://Owner.com website.

More importantly, we’ve helped over 20,000 restaurant owners, and saved them nearly $200 million in fees.

Our team

Our team is now in the low hundreds. We’ve got top talent from the most successful companies in SMB software, including: Shopify, HubSpot, DoorDash, ServiceTitan, Rappi, Faire and Stripe.

We’ll be scaling even faster in 2026 to keep pace with our customer growth.

Where we work

Owner is a remote-first, global company headquartered in San Francisco, with a sales hub in Toronto. For a few of our roles we prioritize in-person collaboration at one of our office locations. Most of our teammates are distributed throughout the globe. Please review the role description and discuss with your recruiter for more details on location!

Why we’re looking for you

Owner is seeking a highly skilled GRC Lead with great energy and experience working with modern software development companies to help us navigate the ever increasing complexity of Risk, Compliance and Vulnerability Management that come along with our rapid growth.

The impact you'll have

- Own PCI compliance end to end, from scoping to audit to remediation, balancing both speed and excellence.

- Build and run vulnerability management so issues get found, prioritized, and effectively closed.

- Translate technical risk into decisions senior leadership can act on, and translate business priorities into a risk program engineering can execute.

- Craft effective programs that allow non-security teams (sales, finance, product) to understand and own their part of the risk picture.

Who you’ll work with

- Reports directly to the VP of Security.

- Works cross functionally across engineering, product, finance, and leadership; this role touches every corner of the business.

- Partners closely with security leadership to drive GRC initiatives, with a clear path to building and leading a team as the function grows.

What we’re looking for

- 5+ years in cybersecurity, including 3+ years running compliance frameworks like PCI DSS or ISO 27001, ideally at a company that enables payments.

- Technical fluency: comfortable reading a system diagram, discussing architecture with engineers, and explaining why a control matters.

- A track record of running a security or GRC program solo, or as the founding function at a startup.

- A strong verbal communicator who can walk a non-technical exec through risk tradeoffs as comfortably as they can walk an engineer through a finding.

- A collaborative, low-ego style: builds buy-in and resolves conflict rather than leaning on policy to force compliance.

Compensation and benefits

- The estimated base salary range for this role is $200,000 to $230,000, plus a generous pre-IPO equity package

- Other benefits include comprehensive health coverage, remote-first workplace, unlimited PTO - plus extra fun perks!

- This range can fall within several levels from Senior to Principal depending on experience

Notice - Employment Scams

Communication from our team regarding job opportunities will only be made by an Owner team member with an @owner.com email address.

We do not conduct interviews over email or chat platforms, and we will never ask you to provide personal or financial information such as your mailing address, social security number, credit card numbers or banking information. If you believe you are being contacted by a scammer, please mark the communication as "phishing" or “spam” and do not respond.