Governance Risk and Compliance Lead

About Owner Owner is the AI-native system local business owners use to succeed, starting with restaurants. We’re building the system that replaces the many tools owners use to run their business. It powers everything from the restaurant’s website, online ordering, CRM, POS, and more. Product philosophy Most small business software makes owners do the work to get what they want: sales growth and profit growth. Owner does the work for them agentically. Our system drives demand, converts it, and helps operators run their business day to day. As it improves, the business improves with it. Using Owner should feel like having a team of great operators, engineers, and marketers working for you. Our vision We’re starting by helping independent restaurants succeed online. But it’s not just restaurants that need our help. Most local businesses are struggling with these same problems. Huge technology corporations are taking their customers, bleeding their profits, and making it hard for them to survive. Once we nail the solution for restaurants – we’ll scale it into every other local business type. In the future we envision, tens of millions of local business owners will use our technology to succeed in the digital age. Read our Series C memo here → Our traction Since 2020, we've generated tens of millions in revenue and processed over a billion dollars of online orders. 1 in 5 Americans have used an Owner.com website. More importantly, we’ve helped over 20,000 restaurant owners, and saved them nearly $200 million in fees. Our team Our team is now in the low hundreds. We’ve got top talent from the most successful companies in SMB software, including: Shopify, HubSpot, DoorDash, ServiceTitan, Rappi, Faire and Stripe. We’ll be scaling even faster in 2026 to keep pace with our customer growth. Where we work Owner is a remote-first, global company headquartered in San Francisco, with a sales hub in Toronto. For a few of our roles we prioritize in-person collaboration at one of our office locations. Most of our teammates are distributed throughout the globe. Please review the role description and discuss with your recruiter for more details on location! Why we’re looking for you Owner is seeking a highly skilled GRC Specialist with great energy and experience working with modern software development companies to help us navigate the ever increasing complexity of Risk, Compliance and Vulnerability Management that come along with our rapid growth. The impact you'll have Drive compliance efforts to unlock business capabilities Secure Owner by helping teams successfully prevent and remediate vulnerabilities Help teams build better and more secure systems by avoiding pitfalls of risk. Advise senior leadership in regards to handling security risk at Owner. Who you’ll work with You will work cross functionally with every corner of the business supporting our security journey. You will work closely with security leadership to drive major initiatives around around GRC at Owner. What we’re looking for Strong communication and problem solving skills 3+ Years experience working with compliance frameworks like PCI / ISO 5+ Years experience in Cyber Security Technical understanding and experience working with development teams. Demonstrated track record of success running a complex security program at a start up Pay and benefits The estimated base salary range for this role is $155,000 to $225,000, plus a generous pre-IPO equity package Other benefits include comprehensive health coverage, remote-first workplace, unlimited PTO - plus extra fun perks! This range can fall within several levels from Senior to Principal depending on experience Notice - Employment Scams Communication from our team regarding job opportunities will only be made by an Owner team member with an @owner.com email address. We do not conduct interviews over email or chat platforms, and we will never ask you to provide personal or financial information such as your mailing address, social security number, credit card numbers or banking information. If you believe you are being contacted by a scammer, please mark the communication as "phishing" or “spam” and do not respond.