Security and Compliance Director

Job Summary

Leading security and compliance initiatives, the full-time Security and Compliance Director will manage compliance programs, protect cloud infrastructure, and oversee data governance in a fully remote environment.

Key Responsibilities

• Lead compliance programs including SOC 2 Type 2, GDPR, and CCPA/CPRA, and manage risk and vendor assessments
• Own business continuity and disaster recovery planning, including incident response exercises
• Oversee application and cloud security standards, ensuring security is integrated into development processes

Required Qualifications

• 8+ years of experience in security and governance, risk, and compliance (GRC), with ownership of a SOC 2 Type 2 program
• Hands-on experience securing major cloud environments, preferably GCP
• Working knowledge of GDPR, CCPA/CPRA, and data governance practices
• Experience with compliance automation and SaaS security management
• Certifications such as CISSP, CISM, CCSP, or CIPP