Security & Compliance Manager

Job Summary

Seeking an experienced Security & Compliance Manager, this full-time remote position will maintain and enhance information security, privacy, and data governance programs while partnering with various teams to ensure compliance with regulatory requirements.

Key responsibilities

• Maintain SOC 2 Type II compliance and lead the ISO 27001 certification effort
• Establish and improve security controls, governance standards, and risk management practices
• Partner with cross-functional teams to integrate security and privacy into products and business processes

Required qualifications

• 3-5 years of experience in information security, data privacy, governance, compliance, or risk management
• Direct experience with SOC 2 Type II and ISO 27001 certification in a SaaS or cloud-first environment
• Hands-on experience with compliance automation tools like Vanta or similar platforms
• Strong knowledge of GDPR, CCPA, and other applicable privacy regulations
• Bachelor's degree in Information Security, Computer Science, Information Systems, Business, Legal Studies, or a related field, or equivalent practical experience