Jason Wilson

Seattle, WA, USA

  1. Engineering

Fractional CISO and GRC engineering leader for PE-backed, pre-IPO, and Mid-Market SaaS. Controls ship with the code.

Governance, privacy, and security built as code, wired into the pipelines and infrastructure underneath them rather than stapled on top. Twenty years across federal and commercial: Pentagon, DIA, Microsoft, Twilio, Real. Equally fluent in a CISO briefing and a pull request. IC who can lead, but the terminal and I never broke up. I architect compliance programs that unlock enterprise revenue, survive audits, and scale across SOC 2, ISO 27001, FedRAMP, and AI governance without slowing engineering velocity or burdening executives. Built for the engineer who inherits it, not the auditor who reviews it.

  1. Governance, Risk, and Compliance (GRC)
  2. Chief Information Security Officer
  3. Amazon Web Services (AWS)
  4. Principal Information Security Engineer
  5. Python
Hire Jason
Jason Wilson

Experience

  • Real

    Chief Data Protection Officer

    Aug 2024 - Aug 2025

    • Led enterprise privacy, AI governance, and GRC for publicly traded real estate platform with 20,000+ agents. Built privacy-by-design program cutting post-launch remediation 75%, mapped 200+ systems, and closed regulatory exams with zero findings.
  • SciNote - Electronic Lab Notebook

    SciNote - Electronic Lab Notebook

    Chief Information Security Officer

    Sep 2023 - Sep 2024

    • Sole security and compliance lead for ELN SaaS serving life sciences. Delivered FedRAMP Moderate ATO solo in 8 months, unlocking $12M+ federal pipeline. Unified controls satisfying NIST 800-53, ISO 27001, SOC 2, HIPAA, GDPR, and 21 CFR Part 11.
  • Twilio

    Twilio

    Head of Product Privacy & Privacy Engineering

    Jul 2021 - Sep 2023

    • Built Twilio's global Privacy Engineering org from zero to 25 across five continents, covering 300K+ accounts. Drove GDPR, CCPA, LGPD, and Schrems II compliance, AI governance for ML features, and DSR automation processing 50K+ requests annually.
  • Microsoft

    Microsoft

    Senior Manager, Security & Privacy Assurance

    Sep 2016 - Sep 2021

    • Directed privacy and security risk management for M365 and Azure serving 1B+ users. Led privacy reviews on 100+ annual releases, drove FedRAMP, FISMA, SOC 2, and ISO 27001 compliance, and conducted DPIAs for AI and automated decisioning.
  • MITRE

    MITRE

    Senior Data Protection Manager

    Jan 2013 - Aug 2015

  • Bloomberg

    Bloomberg

    Senior Federal Technology Analyst

    Dec 2011 - Jan 2013

  • Booz Allen Hamilton

    Booz Allen Hamilton

    Senior Consultant

    Jun 2010 - Dec 2011

  • United States Department of War

    United States Department of War

    Intelligence Analyst

    Oct 2005 - Jun 2010