Compliance Manager

You will own compliance end to end, including audits, evidence, the risk register, and customer security diligence. You will manage SOC 2 and ISO 27001 programs, coordinate contractual obligations, answer security requests, and work with engineering and IT to make evidence collection repeatable.

Responsibilities

• Own SOC 2 Type II, ISO 27001, and future compliance programs
• Manage audit scope, evidence, controls, and external auditor relationships
• Maintain an audit-ready control evidence base in the compliance automation platform
• Lead security diligence for enterprise and regulated customers
• Own and mature the risk register and risk-management program
• Coordinate contractual compliance obligations with legal
• Assess and establish new certifications
• Partner with Engineering and IT to automate evidence collection

Requirements

• 7+ years in governance, risk, and compliance
• Experience owning SOC 2 and ISO 27001 programs and running audits with external auditors
• Experience managing security diligence for enterprise or regulated customers
• Fluency with compliance automation platforms such as Vanta
• Knowledge of security controls in cloud and SaaS environments
• Ability to independently run a cross-functional compliance program

Benefits

• Stock options
• Healthcare plans with 99% employer-covered premiums
• 401k Retirement Plan
• Wellness & Education Stipend
• Paid Parental Leave
• Fertility Benefits
• Paid Time Off
• Commute reimbursement
• In-office meals