Compliance Lead (SaaS)

Location: Remote; must be working in an EU time zone with solid working-hours overlap with CET. Listed locations: Belgium, the United Kingdom, and New York, New York, United States.

Company

hirify.global develops a data quality and observability platform that helps enterprises discover, prioritize, and resolve data issues, with customers including banks, insurers, retailers, and utilities.

What you will do

• Own and advance the compliance function, maximizing automation and reducing manual evidence-gathering work for engineering and operations.
• Adapt compliance processes and controls to hirify.global's use of AI and rapidly evolving product and operations.
• Streamline RFP and security-questionnaire responses using current tooling and references.
• Own the annual SOC 2 Type II and SOC 3 cycles with the external auditor, including planning, access, sampling, reporting, and remediation.
• Keep controls audit-ready and run onboarding, offboarding, security training, code of conduct, incident-reporting, and phishing compliance cycles.
• Partner with Sales during enterprise security reviews and unblock deals without making unsupported commitments.

Requirements

• 3+ years in security compliance or GRC, ideally at a B2B SaaS company.
• Hands-on experience running a SOC 2 Type II cycle with an external auditor, including scoping, sampling, and remediation.
• Hands-on experience with a compliance automation platform, ideally Drata or alternatively Vanta or Secureframe.
• Ability to design and implement automations using scripts, integrations, prompts, and AI-assisted workflows.
• Working knowledge of AWS, Okta, GitHub, and endpoint management sufficient to assess whether control evidence is valid.
• Ability to answer enterprise security questionnaires and participate effectively in live customer security reviews.
• Clear written and spoken English and the judgement to write practical policies.
• Availability for approximately 2–3 days per week; ability to work independently and flag decisions early.
• Must be working in an EU time zone and able to invoice as a freelancer or contractor.

Nice to have

• Technical experience.
• Experience at a company with fewer than 200 people where compliance is handled by one person with extensive automation.
• ISO 27001 experience.
• CISA, CISM, CIPP/E, or ISO 27001 Lead Implementer certification.

Culture & Benefits

• Mandate and freedom to build a modern compliance system that uses AI opportunities.
• Live, certified compliance programme with enterprise customers depending on it.
• Documented starting point with control runbooks, scheduling, and a written handover from the predecessor.
• AI-forward environment with funding for implemented improvements.
• Direct access to decision-makers and a competitive contractor rate.