Data Security Compliance Director

Job Summary

Owning the compliance-side and business operations related to data security, the full-time Data Security Compliance Director will manage certification programs, vendor security relationships, and ensure audit readiness while working remotely.

Key responsibilities

• Maintain and improve the Information Security Management System, managing audits and corrective actions for ISO 27001
• Coordinate evidence collection and liaise with auditors for SOC 2 Type II compliance, driving remediation across teams
• Lead vendor security assessments and maintain a tiered vendor risk register while authoring and updating security policies and controls

Required qualifications

• 5+ years in information security compliance, GRC, or a related function
• Hands-on experience managing ISO 27001 and SOC 2 audits
• Direct experience with engineering teams on control implementation and security questionnaires
• Familiarity with common control frameworks such as ISO 27001, SOC 2, and NIST CSF
• Experience with GRC platforms like Vanta, Drata, or Secureframe