Lead Security Risk Compliance

Job Summary

To establish a centralized security and compliance framework, the full-time remote Lead Security Risk Compliance will manage security policies, oversee SOC 2 and ISO 27001 certifications, and implement security controls while collaborating with cross-functional teams.

Key Responsibilities

• Develop, implement, and maintain a centralized security control framework across portfolio companies
• Lead SOC 2 Type I and Type II engagements, including readiness, control implementation, and reporting
• Conduct security risk assessments and manage vulnerability assessments, ensuring compliance with applicable security requirements

Required Qualifications

• 10+ years of experience in cybersecurity, risk management, and compliance, including SOC 2 Type II or ISO 27001 certification
• Proven experience developing and implementing security policies and control frameworks
• Strong hands-on experience with cloud and application security across AWS and/or Azure
• Practical experience with security technologies such as Cloudflare/WAF, firewalls, and SIEM
• Experience managing vendor risk, security audits, and customer security reviews in regulated environments