Senior Compliance Officer

Job Summary

Owning and maturing the compliance program, the full-time Senior Compliance Officer will manage SOC 2 Type II compliance, lead PCI DSS Service Provider Level 1 rollout, and enhance GDPR compliance, all while working remotely across US Eastern and EMEA time zones.

Key responsibilities

• Manage the SOC 2 Type II compliance program, including annual audits and control maintenance
• Design and implement PCI DSS compliance initiatives in collaboration with engineering teams and a QSA
• Develop and formalize GDPR compliance processes, ensuring robust data protection practices across departments

Required qualifications

• Significant experience running compliance programs in a SaaS or technology company
• Deep knowledge of SOC 2 and PCI DSS frameworks, with practical understanding of controls
• Experience with GRC platforms, preferably Vanta, for managing compliance workflows
• Familiarity with GDPR and data protection requirements
• Ability to work cross-functionally with engineering teams and translate compliance requirements into actionable tasks