Director of GRC Engineering

Flock Safety is the leading safety technology platform, helping communities thrive by taking a proactive approach to crime prevention and security. Our hardware and software suite connects cities, law enforcement, businesses, schools, and neighborhoods in a nationwide public-private safety network. Trusted by over 5,000 communities, 4,500 law enforcement agencies, and 1,000 businesses, Flock delivers real-time intelligence while prioritizing privacy and responsible innovation.

We’re a high-performance, low-ego team driven by urgency, collaboration, and bold thinking. Working at Flock means tackling big challenges, moving fast, and continuously improving. It’s intense but deeply rewarding for those who want to make an impact.

With nearly $700M in venture funding and a $7.5B valuation, we’re scaling intentionally and seeking top talent to help build the impossible. If you value teamwork, ownership, and solving tough problems, Flock could be the place for you.

The Opportunity

We are looking for an experienced GRC leader with an engineering background to join our existing team and take us to the next level. Governance, risk and compliance is key to ensuring the cybersecurity program we’ve built is continuously improving. This leader will be responsible for maintaining a high level of trust with our customers through our GRC program. You will also be able to interact with customers on a daily basis to build and maintain that trust directly. You’ll also ensure our numerous annual audits are completed on time and minimal impact to the rest of the business.

You’ll lead our existing GRC team members and support their continued growth to achieve the vision you set for GRC at Flock. You will also collaborate across the entire business and be a customer-service minded champion for cyber compliance You’ll also partner closely with our Chief Compliance & Data Privacy Officer. This role reports directly to our CISO.

• Own, manage and be accountable for supporting our revenue team both on net new deals as well as renewals and RFIs when it comes to customer security reviews.

• Build automation into GRC

• Deploy GRC-as-Code / Policy-as-Code

• Deploy AI into our GRC processes where appropriate

• Lead and build a high performing team

• Manage our public trust center.

• Maintain a high level of customer service for both internal and external stakeholders and customers.

• Lead our annual external audits such as SOC2, ISO 27001, ISO 27701, CJIS, FedRAMP and others and serve as primary point of contact for external auditors.

• Lead our internal audits

• Lead and manage vendor security reviews for our entire supply chain

• Lead cyber risk management for the business and oversee the cybersecurity risk register.

• Draft and manage all cybersecurity related policies, procedures, and standards.

• Partner closely with Product Security & Privacy, Engineering and Product teams to conduct privacy threat modeling

• Define and track key performance indicators (KPIs) and key risk indicators (KRIs) from engineering and cloud telemetry data to provide measurable, risk-based insights to leadership

The Skillset

• Leadership & Management:

  • 5+ years of people leadership experience

  • 10+ years general GRC experience

  • Ability to delegate and dive deep with your team to solve problems quickly

  • Define and execute the multi-year vision, strategy, and roadmap for the GRC Engineering function, aligning it with overall business objectives and the security program's evolution.

  • Mentor and coach team members, fostering a culture of continuous learning, automation-first thinking, and professional growth in both GRC and technical engineering skills.

  • Manage the GRC Engineering budget, external vendor relationships, and resource allocation to ensure optimal efficiency and effectiveness of the compliance program.

  • Drive a proactive, security-minded, and compliance-aware culture across the entire engineering and product organization.

• Technical Expertise:

  • Strong experience in reviewing and redlining contracts

  • Ability to strike a balance between customer requirements and organizational risk when considering contracting

  • Strong negotiation skills when managing vendor and supply chain risks

  • Proven ability to to build business-centric Third Party Risk programs

  • Experience with and deep knowledge of CJIS Security Policy or NIST 800-53

  • Experience and knowledge of HIPAA, GDPR, CCPA, LINDDUN

  • Understanding of product development, SDLC and CD/CI

  • Deep knowledge of AWS

  • Familiarity with tools like Terraform or CloudFormation for managing and auditing infrastructure configuration as code.

  • Experience integrating GRC processes with vulnerability management and security configuration tools to track remediation and ensure control coverage.

• Operational & Collaboration Skills:

  • Strong communication and diplomatic skills in building consensus from dispersed teams with competing priorities.

  • Build and nurture strong cross-business relationships with Engineering, IT, Product, Legal, Revenue, People and the broader cybersecurity team.

Feeling uneasy that you haven’t ticked every box? That’s okay; we’ve felt that way too. Studies have shown women and minorities are less likely to apply unless they meet all qualifications. We encourage you to break the status quo and apply to roles that would make you excited to come to work every day.

90 Days at Flock

We prescribe to 90 day plans and believe that good days lead to good weeks, which lead to good months. This serves as a preview of the 90 day plan you will receive if you were to be hired in this role at Flock Safety.

The First 30 Days

• Establish strong working partnerships with the CISO, Product Security, Engineering, Product, IT, Revenue, and Procurement.

• Meet 1:1 with each GRC team member to understand strengths, gaps, and development opportunities.

The First 60 Days

• Define and socialize a clear vision and strategy for GRC aligned with business goals

• Align with Security and executive leadership on risk appetite and prioritization framework.

90 Days & Beyond

• Defined automation roadmap and clear GRC strategy

Salary & Equity

In this role, you’ll receive a starting salary between $195,000 and $260,000 as well as Flock Safety Stock Options. Base salary is determined by job-related experience, education/training, as well as market indicators. Your recruiter will discuss this in-depth with you during our first chat.

Location

We’re building the impossible, together. To drive innovation through in-person collaboration, we’re prioritizing candidates in our key hubs: Atlanta, Boston, Chicago, Denver, Los Angeles, New York City, San Francisco, and Austin. While we value the energy of our hub communities, we embrace remote work and welcome applications from exceptional talent across the United States.

The Perks

🌴Flexible PTO: We offer non-accrual PTO, plus 11 company holidays.

⚕️Fully-paid health benefits plan for employees: including Medical, Dental, and Vision and an HSA match.

👪Family Leave: All employees receive 12 weeks of 100% paid parental leave. Birthing parents are eligible for an additional 6-8 weeks of physical recovery time.

🍼Fertility & Family Benefits: We have partnered with Maven, a complete digital health benefit for starting and raising a family. Flock will provide a $50,000-lifetime maximum benefit related to eligible adoption, surrogacy, or fertility expenses.

🧠Spring Health: Spring Health offers a variety of mental health benefits, including therapy, coaching, medication management, and digital tools, all tailored to each individual's needs.

💖Caregiver Support: We have partnered with Cariloop to provide our employees with caregiver support

💸Carta Tax Advisor: Employees receive 1:1 sessions with Equity Tax Advisors who can address individual grants, model tax scenarios, and answer general questions.

💚ERGs: We want all employees to thrive and feel like they belong at Flock. We offer four ERGs today - Women of Flock, Flock Proud, LEOs and Melanin Motion. If you are interested in talking to a representative from one of these, please let your recruiter know.

💻WFH Stipend: $150 per month to cover the costs of working from home.

📚Productivity Stipend: $300 per year to use on Audible, Calm, Masterclass, Duolingo and so much more.

🏠Home Office Stipend: A one-time $750 to help you create your dream office.

If an offer is extended and accepted, this position requires the ability to obtain and maintain Criminal Justice Information Services (CJIS) certification as a condition of employment. Applicants must meet all FBI CJIS Security Policy requirements, including a fingerprint-based background check.

Flock is an equal opportunity employer. We celebrate diverse backgrounds and thoughts and welcome everyone to apply for employment with us. We are committed to fostering an environment that is inclusive, transparent, and collaborative. Mutual respect is central to how Flock operates, and we believe the best solutions come from diverse perspectives, experiences, and skills. We embrace our differences and know that we are stronger working together.

If you need assistance or an accommodation due to a disability, please email us at [email protected]. This information will be treated as confidential and used only to determine an appropriate accommodation for the interview process.

At Flock Safety, we compensate our employees fairly for their work. Base salary is determined by job-related experience, education/training, as well as market indicators. The range above is representative of base salary only and does not include equity, sales bonus plans (when applicable) and benefits. This range may be modified in the future. This job posting may span more than one career level.

Flock Safety is aware of fraudulent individuals and agencies falsely claiming to represent our company. All legitimate communication from Flock Safety will come from an email address ending in @flocksafety.com. We do not make job offers through messaging apps, social platforms, or unauthorized third parties, and we will never request payment or sensitive personal information during the hiring process. If you encounter suspicious outreach related to a Flock Safety role, please report it to [email protected]