Compliance Manager

Job Summary

Owning and driving the governance, risk, and compliance program, the full-time remote Compliance Manager will maintain and evolve compliance initiatives, including certifications like SOC 2 and ISO 27001, while collaborating with cross-functional teams across the organization.

Key responsibilities

• Manage and oversee SOC 2 and ISO 27001 compliance programs, including audit activities and evidence collection
• Develop and maintain compliance documentation, risk registers, and internal training to ensure adherence to compliance responsibilities
• Identify control gaps, recommend solutions, and drive remediation efforts across technical and non-technical stakeholders

Required qualifications

• 5+ years of experience in governance, risk, compliance, or information security compliance
• Demonstrated end-to-end ownership of SOC 2 and ISO 27001 programs, preferably in a SaaS or technology startup environment
• Experience managing external audits and certification processes, including control testing and stakeholder coordination
• Strong understanding of risk management, control design, and compliance program operations
• Familiarity with cloud-based technology environments and compliance considerations for a distributed workforce