Security and Compliance Manager

Job Summary

Owning the security and compliance program end-to-end, the fully remote Head of Security and Compliance will manage the SOC 2 audit cycle, customer security questionnaires, internal policies, and vendor risk management while driving security as a competitive advantage for the organization.

Key responsibilities

• Oversee the SOC 2 Type II audit cycle, including control design, evidence collection, and auditor management
• Manage responses to customer security questionnaires and audits, collaborating closely with Sales and Engineering teams
• Develop and maintain internal security policies, procedures, and controls, ensuring compliance with relevant regulatory requirements

Required qualifications

• 6-10 years of hands-on security and compliance experience at a SaaS or technology company
• Direct experience managing a SOC 2 Type II audit cycle, including evidence collection and auditor management
• Proficiency with a GRC platform such as Vanta, Drata, or Secureframe
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience
• Strong knowledge of cloud security (AWS and/or Azure) and vulnerability management