Book a car rental on Turo, skip the rental counter. From EVs and trucks to luxury vehicles, find the right car for your trip. Free cancellation on most trips. Backed by Kleiner Perkins and GV.
About the role
For this role, the target base salary range in San Francisco is $131,000-$164,000 annually. This role is also eligible for equity and benefits. In general, our ranges reflect the market-based target for new hire salaries based on the level and location of the role. Within the range, individual pay is determined by objective factors assessed during the application and interview process, such as job-related skills, experience, and relevant education or training. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Own the compliance calendar and drive end-to-end audit readiness for SOC 2 Type II and PCI DSS, including scoping, control mapping, and continuous readiness between audit cycles
- Coordinate evidence collection across Engineering, IT, Finance, and business teams, track control owners and close gaps ahead of audit windows
- Serve as the primary day-to-day liaison with external auditors and assessors to manage requests, facilitate walkthroughs, and coordinate remediation of findings
- Maintain and evolve the common control framework: map controls across SOC 2, PCI DSS, and other applicable standards, identify and eliminate redundant testing where possible
- Lead compliance testing activities, document results, and maintain evidence repositories that support both internal review and external audit
- Track open audit findings and remediation commitments, provide status reporting to Security leadership and relevant stakeholders
More about this role
Turo is searching for a highly motivated and versatile Senior Security GRC Analyst under the Enterprise Security team to lead security compliance programs as a senior individual contributor. This role carries primary ownership of SOC 2 Type II and PCI DSS audit readiness and coordination, and serves as the connective tissue between Engineering, IT, Finance, Legal, and business control owners. You will drive complex security compliance workstreams with limited oversight, exercising strong judgment and cross-functional influence to keep Turo audit-ready year-round.
Security Compliance & Audit Readiness
- Own the compliance calendar and drive end-to-end audit readiness for SOC 2 Type II and PCI DSS, including scoping, control mapping, and continuous readiness between audit cycles.
- Coordinate evidence collection across Engineering, IT, Finance, and business teams; track control owners and close gaps ahead of audit windows.
- Serve as the primary day-to-day liaison with external auditors and assessors to manage requests, facilitate walkthroughs, and coordinate remediation of findings.
- Maintain and evolve the common control framework: map controls across SOC 2, PCI DSS, and other...
Browse similar: Startup jobs · San Francisco Bay Area