Compliance and Risk Manager

Job Summary

Owning the compliance and risk program end-to-end, the full-time remote Manager of Compliance & Risk will manage SOC 2 audits, build an enterprise risk management program, and lead the selection and implementation of a GRC platform while collaborating with cross-functional teams.

Key responsibilities

• Oversee the compliance program for all brands, including SOC 2 audits and third-party risk management
• Build and maintain an enterprise risk management program, including a risk register and quarterly reporting to executive leadership
• Lead the implementation and administration of a GRC platform, enhancing control mapping and vendor risk workflows

Required qualifications

• 7+ years in compliance, governance, or risk within SaaS or technology, with at least 2 years in a leadership role
• Hands-on experience with SOC 2 Type II audits and building risk management programs
• Experience implementing or administering GRC platforms such as Vanta, Drata, or OneTrust
• Knowledge of ISO 27001, NIST, SOC 2 control frameworks, and privacy laws including GDPR
• Preferred certifications include CISSP, CISA, CRISC, or IAPP