Security Compliance Manager

Security Compliance Manager

Overview

Lead the day-to-day execution of a growing technology company’s security compliance program and help enterprise customers move confidently through procurement. As the dedicated owner of security compliance operations, you will coordinate outsourced security partners, drive SOC 2 Type II activities, manage penetration testing and remediation, and respond to customer security reviews with speed and credibility.

This role is ideal for a seasoned security compliance professional who combines strong program management with customer-facing polish. You will partner closely with engineering, finance, leadership, and go-to-market teams while representing the organization in conversations involving security controls, data handling, AI governance, and responsible AI.

Required Skills

• 4–7 years of experience in security compliance, GRC, or information security operations within a B2B SaaS or technology company
• Experience coordinating a SOC 2 Type II program through at least two audit cycles, either in-house or with an outsourced provider
• Proven ability to manage external vendors, establish deadlines, escalate issues, and drive accountability
• Direct experience completing customer security questionnaires, RFPs, and vendor risk assessments at volume, including 30 or more annually
• Confidence participating in customer procurement and security review calls and responding to detailed questions from security teams
• Familiarity with compliance automation platforms such as Vanta, Drata, Secureframe, Worksheet, or similar tools
• Working knowledge of cloud security concepts, including AWS or GCP, SSO and identity management, encryption, and access controls
• Strong project management, organization, prioritization, and follow-through skills
• Ability to collaborate effectively with engineering, leadership, external vendors, auditors, and go-to-market teams
• Excellent written and verbal communication skills

Nice to Have Skills

• Experience working at an AI or machine learning company
• Familiarity with AI security topics, including LLM data handling, prompt injection, model safety, and responsible AI
• Exposure to AI compliance frameworks such as NIST AI Risk Management Framework or ISO/IEC 42001
• Experience coordinating penetration tests, triaging findings, and tracking remediation with engineering teams
• Experience supporting ISO 27001, HIPAA, or FedRAMP programs
• Background in sales enablement or close partnership with go-to-market teams
• Familiarity with enterprise procurement processes and security review workflows
• Experience in a startup or growth-stage environment with minimal oversight

Preferred Education and Experience

• Four to seven years of relevant experience in security compliance, GRC, or information security operations
• Experience in a B2B SaaS, technology, AI, or machine learning environment is preferred
• Experience coordinating at least two SOC 2 Type II audit cycles is preferred
• Relevant certifications such as CISSP, CISM, CISA, or CompTIA Security+ are preferred
• Specific educational requirements were not provided

Key Responsibilities

• Serve as the primary point of contact and project manager for an outsourced security agency
• Set priorities, define deliverables, track milestones, and hold external partners accountable to service-level commitments
• Coordinate with engineering and leadership to remove blockers and drive remediation work
• Manage the compliance automation platform, ensuring evidence is current, controls are monitored, and gaps are identified early
• Coordinate annual SOC 2 Type II audit activities, including readiness reviews, evidence collection, gap remediation, and audit execution
• Maintain current security policies and control documentation in partnership with the outsourced agency and internal stakeholders
• Track and report compliance status, open items, and remediation timelines to leadership
• Manage the annual penetration testing cycle, including vendor scheduling, scope coordination, finding triage, remediation tracking, and validation
• Own customer security questionnaires, RFPs, and vendor risk assessments while maintaining a reusable response library
• Keep external security documentation and the company’s Trust Center up to date
• Join customer procurement and security review calls with go-to-market teams
• Represent the organization in AI governance, responsible AI, and AI compliance discussions
• Monitor emerging AI compliance requirements and advise on their potential applicability
• Maintain AI-related security and governance documentation, including data processing materials, AI use policies, and model governance summaries
• Coordinate third-party vendor and subprocessors’ security assessments
• Support security awareness training, incident response documentation, and periodic tabletop exercises
• Provide regular security compliance updates to leadership

Other Requirements

• Full-time contract position
• Remote within the United States; Bay Area availability is a plus
• Must be comfortable working with distributed teams and external service providers
• Must be able to participate in customer-facing security, procurement, and AI governance discussions
• Must be able to manage multiple compliance initiatives and deadlines with minimal oversight
• Relevant security or compliance certification is preferred but not required