Compliance Engineering Lead

Job Summary

Owning the compliance program end to end, the full-time remote Compliance Engineering Lead will manage SOC 2 Type II and ISO 27001 certifications, automate evidence collection, and shape the governance, risk, and compliance (GRC) strategy at Socket.

Key responsibilities

• Oversee SOC 2 Type II audits, managing the auditor relationship and ensuring compliance controls are effectively implemented
• Lead the ISO 27001 certification process, including gap assessments, internal audits, and maintaining an active Information Security Management System (ISMS)
• Develop automated systems for continuous evidence collection and monitoring to streamline compliance processes

Required qualifications

• Proven experience owning at least two full SOC 2 Type II cycles, including auditor management and evidence handling
• Demonstrated expertise in ISO 27001 certification processes and maintaining an effective ISMS
• Strong automation skills with experience in building and maintaining automation against services like GCP and GitHub
• Hands-on experience with compliance platforms such as Drata or Vanta, with clear opinions on their effectiveness
• Ability to navigate and address unowned problems across Security, Engineering, Legal, and Go-to-Market teams in a remote, fast-paced environment