Security Compliance Manager
Overview
Lead the day-to-day execution of a growing technology company’s security compliance program and help enterprise customers move confidently through procurement. As the dedicated owner of security compliance operations, you will coordinate outsourced security partners, drive SOC 2 Type II activities, manage penetration testing and remediation, and respond to customer security reviews with speed and credibility.
This role is ideal for a seasoned security compliance professional who combines strong program management with customer-facing polish. You will partner closely with engineering, finance, leadership, and go-to-market teams while representing the organization in conversations involving security controls, data handling, AI governance, and responsible AI.
Required Skills
- 4–7 years of experience in security compliance, GRC, or information security operations within a B2B SaaS or technology company
- Experience coordinating a SOC 2 Type II program through at least two audit cycles, either in-house or with an outsourced provider
- Proven ability to manage external vendors, establish deadlines, escalate issues, and drive accountability
- Direct experience completing customer security questionnaires, RFPs, and vendor risk assessments at volume, including 30 or more annually
- Confidence participating in customer procurement and security review calls and responding to detailed questions from security teams
- Familiarity with compliance automation platforms such as Vanta, Drata, Secureframe, Worksheet, or similar tools
- Working knowledge of cloud security concepts, including AWS or GCP, SSO and identity management, encryption, and access controls
- Strong project management, organization, prioritization, and follow-through skills
- Ability to collaborate effectively with engineering, leadership, external vendors, auditors, and go-to-market teams
- Excellent written and verbal communication skills
Nice to Have Skills
- Experience working at an AI or machine learning company
- Familiarity with AI security topics, including LLM data handling, prompt injection, model safety, and responsible AI
- Exposure to AI compliance frameworks such as NIST AI Risk Management Framework or ISO/IEC 42001
- Experience coordinating penetration tests, triaging findings, and tracking remediation with engineering teams
- Experience supporting ISO 27001, HIPAA, or FedRAMP programs
- Background in sales enablement or close partnership with go-to-market teams
- Familiarity with enterprise procurement processes and security review workflows
- Experience in a startup or growth-stage environment with minimal oversight
Preferred Education and Experience
- Four to seven years of relevant experience in security compliance, GRC, or information security operations
- Experience in a B2B SaaS, technology, AI, or machine learning environment is preferred
- Experience coordinating at least two SOC 2 Type II audit cycles is preferred
- Relevant certifications such as CISSP, CISM, CISA, or CompTIA Security+ are preferred
- Specific educational requirements were not provided
Key Responsibilities
- Serve as the primary point of contact and project manager for an outsourced security agency
- Set priorities, define deliverables, track milestones, and hold external partners accountable to service-level commitments
- Coordinate with engineering and leadership to remove blockers and drive remediation work
- Manage the compliance automation platform, ensuring evidence is current, controls are monitored, and gaps are identified early
- Coordinate annual SOC 2 Type II audit activities, including readiness reviews, evidence collection, gap remediation, and audit execution
- Maintain current security policies and control documentation in partnership with the outsourced agency and internal stakeholders
- Track and report compliance status, open items, and remediation timelines to leadership
- Manage the annual penetration testing cycle, including vendor scheduling, scope coordination, finding triage, remediation tracking, and validation
- Own customer security questionnaires, RFPs, and vendor risk assessments while maintaining a reusable response library
- Keep external security documentation and the company’s Trust Center up to date
- Join customer procurement and security review calls with go-to-market teams
- Represent the organization in AI governance, responsible AI, and AI compliance discussions
- Monitor emerging AI compliance requirements and advise on their potential applicability
- Maintain AI-related security and governance documentation, including data processing materials, AI use policies, and model governance summaries
- Coordinate third-party vendor and subprocessors’ security assessments
- Support security awareness training, incident response documentation, and periodic tabletop exercises
- Provide regular security compliance updates to leadership
Other Requirements
- Full-time contract position
- Remote within the United States; Bay Area availability is a plus
- Must be comfortable working with distributed teams and external service providers
- Must be able to participate in customer-facing security, procurement, and AI governance discussions
- Must be able to manage multiple compliance initiatives and deadlines with minimal oversight
- Relevant security or compliance certification is preferred but not required
