Head of Compliance
ΠΡΡΡ & Π‘ΠΎΠΏΡΠΎΠ²ΠΎΠ΄
ΠΠ»Ρ ΠΌΡΡΡΠ° Ρ ΡΡΠΎΠΉ Π²Π°ΠΊΠ°Π½ΡΠΈΠ΅ΠΉ Π½ΡΠΆΠ΅Π½ Plus
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ Π²Π°ΠΊΠ°Π½ΡΠΈΠΈ
Location: United States β remote; US-based candidates required. Occasional travel to customer sites may be required. San Francisco, Los Angeles, Austin, or remote.
Company
is building an automation- and AI-powered software stack for managed service providers serving small and mid-market businesses.
What you will do
- Own 's internal compliance program, including controls, evidence collection, Vanta or Drata hygiene, auditor coordination, policies, risk registers, vendor assessments, and ISMS documentation.
- Drive SOC 2 Type II and ISO 27001 certification efforts from gap assessment through audit preparation.
- Lead customer SOC 2 and ISO 27001 readiness engagements, including scoping, control implementation, audit preparation, and coordination of penetration testing.
- Manage multiple concurrent customer engagements and communicate with security engineers, founders, CISOs, and other stakeholders.
- Build repeatable frameworks, scoping standards, and customer-facing artifacts for the Compliance-as-a-Service offering.
- Feed customer insights into 's platform and product decisions.
Requirements
- 5β8+ years of experience in compliance, security, or risk.
- Meaningful experience at or alongside an audit or advisory firm, such as a SOC 2 audit practice, Big Four risk practice, or compliance consultancy.
- End-to-end experience running SOC 2 and ISO 27001 readiness projects.
- Hands-on experience building compliance frameworks from scratch.
- Deep familiarity with SOC 2 and ISO 27001; Vanta or Drata experience is strongly preferred.
- Must be US-based and able to travel occasionally to customer sites.
Nice to have
- FedRAMP familiarity.
Culture & Benefits
- Founding equity and competitive base salary.
- Comprehensive health, dental, and vision coverage.
- Flexible paid time off.
- Remote-first work environment with direct partnership with engineering and leadership.
- Small, collaborative team with an emphasis on execution, autonomy, and minimal bureaucracy.
ΠΡΠ΄ΡΡΠ΅ ΠΎΡΡΠΎΡΠΎΠΆΠ½Ρ: Π΅ΡΠ»ΠΈ ΡΠ°Π±ΠΎΡΠΎΠ΄Π°ΡΠ΅Π»Ρ ΠΏΡΠΎΡΠΈΡ Π²ΠΎΠΉΡΠΈ Π² ΠΈΡ ΡΠΈΡΡΠ΅ΠΌΡ, ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΡ iCloud/Google, ΠΏΡΠΈΡΠ»Π°ΡΡ ΠΊΠΎΠ΄/ΠΏΠ°ΡΠΎΠ»Ρ, Π·Π°ΠΏΡΡΡΠΈΡΡ ΠΊΠΎΠ΄/ΠΠ, Π½Π΅ Π΄Π΅Π»Π°ΠΉΡΠ΅ ΡΡΠΎΠ³ΠΎ - ΡΡΠΎ ΠΌΠΎΡΠ΅Π½Π½ΠΈΠΊΠΈ. ΠΠ±ΡΠ·Π°ΡΠ΅Π»ΡΠ½ΠΎ ΠΆΠΌΠΈΡΠ΅ "ΠΠΎΠΆΠ°Π»ΠΎΠ²Π°ΡΡΡΡ" ΠΈΠ»ΠΈ ΠΏΠΈΡΠΈΡΠ΅ Π² ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΊΡ. ΠΠΎΠ΄ΡΠΎΠ±Π½Π΅Π΅ Π² Π³Π°ΠΉΠ΄Π΅ β