Compliance and Governance Specialist

Job Summary

Leading the design and implementation of compliance frameworks, the full-time remote Compliance and Governance Specialist will manage security compliance programs, oversee audit readiness, and drive cross-functional collaboration to enhance the organization's security posture across product and cloud environments.

Key responsibilities

• Own and manage the organization's security compliance programs, including SOC 2 Type II and ISO 27001
• Lead audit readiness efforts, including gap assessments, control mapping, and remediation follow-up
• Collaborate with cross-functional teams to automate evidence collection and integrate security controls into the SDLC

Required qualifications

• 5+ years in information security compliance, risk management, or audit with hands-on SOC 2 Type II experience
• Deep knowledge of SOC 2 Trust Services Criteria and practical audit mechanics
• Experience operationalizing ISO 27001 and managing CAPAs
• Ability to assess control design and effectiveness, identifying gaps and driving remediation
• Comfort working in a cloud-native environment, particularly Azure