Security and Compliance Manager

Job Summary

To maintain and strengthen information security and compliance programs, the full-time remote Security & Compliance Manager will oversee SOC 2 Type II compliance, lead ISO 27001 certification efforts, and partner with cross-functional teams to align security practices with regulatory requirements.

Key responsibilities

• Maintain SOC 2 Type II compliance and lead the ISO 27001 certification process
• Establish and improve security controls, governance standards, and risk management practices
• Collaborate with Engineering, Product, and Operations to integrate security and privacy into business processes

Required qualifications

• 3 to 5 years of experience in information security, data privacy, governance, or compliance
• Direct experience with SOC 2 Type II maintenance and ISO 27001 certification in a SaaS environment
• Hands-on experience with compliance automation tools like Vanta or similar platforms
• Strong knowledge of GDPR, CCPA, and other privacy regulations
• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience