Security & Compliance Manager
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security and compliance manager maintaining SOC 2 and leading ISO 27001 for Relocity’s AI-driven mobility platform. Strengthening privacy, governance, risk management, and data protection across the remote United States team.
Responsibilities:
- Maintain SOC 2 Type II compliance, including control operation, evidence collection, and annual audit readiness.
- Lead the ISO 27001 certification effort from gap assessment through certification and ongoing surveillance.
- Own security and privacy frameworks, including GDPR, CCPA, and other applicable regulations.
- Advise the company on security, privacy, and compliance strategy.
- Establish and improve security controls, governance standards, policies, and risk management practices.
- Conduct security risk assessments, manage incident response, and drive remediation efforts.
- Administer Vanta and related tooling for compliance monitoring, continuous control testing, and audit workflows.
- Partner with Engineering, Product, Operations, Legal, and leadership to embed security and privacy into products, systems, and business processes.
- Translate technical risk into practical business recommendations.
- Define enterprise data governance standards, including data classification, retention, and lifecycle management.
- Lead company-wide security awareness initiatives.
- Monitor evolving regulations, emerging threats, and industry best practices.
- Evaluate and implement technologies and processes that improve automation, visibility, and operational efficiency.
Requirements:
- Three to five years of experience in information security, data privacy, governance, compliance, or risk management.
- Direct experience maintaining SOC 2 Type II and leading or supporting ISO 27001 certification in a SaaS or cloud-first environment.
- Hands-on experience with Vanta or comparable GRC platforms such as Drata, Secureframe, or Sprinto.
- Strong working knowledge of GDPR, CCPA, and other applicable privacy regulations.
- Demonstrated success designing and implementing data classification, retention, privacy, and security programs.
- Familiarity with cloud infrastructure, SaaS environments, identity and access management, and security controls.
- Ability to explain complex technical concepts to technical and non-technical audiences.
- Proven ability to influence stakeholders and lead initiatives across multiple functions.
- Bachelor's degree in Information Security, Computer Science, Information Systems, Business, Legal Studies, or a related field, or equivalent practical experience.
- Professional certifications such as CIPP/US, CIPM, CISSP, CISM, or CRISC are nice to have.
- Experience in a high-growth SaaS or technology startup environment is nice to have.
- Knowledge of privacy-by-design principles is nice to have.
- Must be legally authorized to work.
- Successful completion of a background investigation is required for any employment offer.
Benefits:
- Competitive Compensation
- Paid Time Off
- Paid Parental Leave
- Remote Workplace
- Flexible Work Schedules
- Health, Dental, Vision, and LTD Insurance
- 401(k)
- Professional Development Opportunities
- Bonus
Similar Jobs
Director, Regulatory Response and Examination Management
Director leading regulatory examinations, inquiries, and enforcement responses for SunStrong Management’s solar asset portfolios. Building scalable readiness, documentation, compliance, and remediation programs.
Senior Director, Compliance and Privacy
Senior Director leading healthcare compliance, regulatory auditing, and HIPAA privacy programs for American Health Plans. Overseeing risk assessments, investigations, training, audits, and regulatory readiness.
Intake Coordinator – Ethics & Compliance Operations
Intake Coordinator processing confidential ethics and compliance reports for Activision Blizzard, an interactive entertainment company. Maintaining case records, conducting intake conversations, and supporting investigations operations.
GMP QC Compliance Specialist
Senior QC compliance specialist guiding GMP, audits, QMS, data integrity, and regulatory submissions for Pace’s mRNA and biologics laboratories. Supporting safer, healthier outcomes through scientific laboratory services.
Regulatory and Reimbursement Coordinator
Regulatory and reimbursement coordinator managing Medicare, Medicaid, and BlueCross cost reporting for Mercyhealth. Supporting governmental compliance, budgets, reimbursements, audits, and financial performance analysis.
Risk and Compliance Manager
Risk and Compliance Manager overseeing marketing compliance for Marqeta’s embedded finance platform. Reviewing campaigns, advising product teams, and managing regulatory risk across US and Canadian operations.
Senior Regulatory and Start Up Specialist, Brazil
Senior regulatory specialist managing clinical-trial submissions and site activation for Precision for Medicine in Brazil. Supporting compliance, essential documents, contracts, and country start-up activities.
Senior Regulatory and Start Up Specialist, Brazil
Senior regulatory specialist launching clinical trial sites in Brazil for Precision Medicine Group. Managing submissions, essential documents, site activation, and local regulatory compliance.
Regulatory Analyst
Regulatory Analyst translating European climate and carbon-market policy into actionable trading opportunities for Targray. Supporting environmental commodities decisions through regulatory research, analytics, and compliance-credit frameworks.
Regulatory Analyst
Regulatory Analyst translating European climate and renewable-energy policy into actionable carbon-market insights for Targray. Supporting traders with compliance frameworks, credit opportunities, and regulatory-risk analysis.
GDPR Compliance Consultant
GDPR Compliance Consultant helping organizations navigate cybersecurity and regulatory requirements. Building EU and UK privacy programs, assessments, documentation, and governance processes for regulated industries.
Special Education Compliance Clerk
Special Education Compliance Clerk monitoring requirements and scheduling IEP meetings for Arizona Virtual Academy. Supporting online, personalized education through timely coordination with schools, providers, and families.
Country Trade Compliance Officer
Hitachi Energy trade compliance manager overseeing U.S. import, export, customs, and sanctions requirements. Advising global power-industry teams and strengthening regulated supply-chain processes.
Senior GRC Analyst
GRC Senior Analyst driving compliance strategy ensuring SOX, ISO 27001, and GDPR compliance in a product company. Collaborating across teams to enhance governance, risk, and compliance functions.
Regulatory Affairs Specialist – German Speaker
Regulatory Affairs Specialist ensuring regulatory compliance and submissions for clinical trials in Germany and Switzerland. Collaborating with internal teams and external regulators while managing documentation.
Senior Manager, Government Compliance
Government Compliance professional at L3Harris Technologies' SMS segment. Ensuring compliance with government regulations and cost accounting standards.
CARF Quality & Compliance Consultant – PRN/Contract
CARF Quality & Compliance Consultant offering strategic guidance and consultation to improve behavioral health organization compliance. Involves auditing, training, and development for CARF standards and quality improvement.
Senior Consultant, Gas Utility Regulation
Consultant/Senior Consultant at Current Energy Group focusing on gas utility regulation and policy analysis. Collaborating with clients on state-level utility policies and regulatory filings in the energy sector.
Director, Governance, Risk & Compliance
Director of Governance, Risk & Compliance at CompassMSP leading compliance programs like SOC 2 and HITRUST. Overseeing risk management and team development in a managed services context.
License Compliance Specialist
License Compliance Specialist at Ruvixx managing compliance cases in North America. Engaging with customers and stakeholders to drive software licensing success.