Compliance Lead – Part-time, Contractor

This is a fully remote position, open to applicants in Belgium, +2 more countries.

📋 Description

• Take charge of Soda's compliance function and further develop it.

• Drive the automation of the compliance program to minimize manual tasks and streamline evidence collection.

• Adjust compliance posture and controls in response to changes driven by AI in products and operations.

• Enhance the efficiency of RFP and security-questionnaire responses by utilizing existing and new tools.

• Oversee the annual SOC 2 Type II and SOC 3 cycles with the external auditor, managing planning, access, sampling, reporting, and resolution of findings.

• Maintain the control set in an audit-ready state throughout the year by monitoring lapses, failures, and pending actions.

• Manage compliance processes related to personnel, including onboarding, offboarding, annual security training, code of conduct, incident reporting, and phishing cycles.

• Collaborate with Sales on enterprise security reviews to facilitate deals without overcommitting.

• Coordinate with engineers and operational stakeholders to fulfill compliance tasks and provide necessary evidence.

• Develop scripts, integrations, prompts, and AI-assisted workflows that can withstand auditor scrutiny.

• Independently oversee the agenda and highlight decisions that require company input.

⛳️ Requirements

• Minimum of 3 years of experience in security compliance / GRC, preferably in a B2B SaaS environment.

• Demonstrated experience managing a SOC 2 Type II cycle hands-on, including direct collaboration with an external auditor for scoping, sampling, and remediation.

• Proficient in using a compliance automation platform, ideally Drata, or alternatives like Vanta / Secureframe.

• Comfortable designing and implementing automation solutions, including those utilizing AI technologies.

• Familiar with AWS, Okta, GitHub, and endpoint management tools.

• Capable of responding to enterprise security questionnaires and confidently participating in live customer security reviews.

• Strong written and verbal communication skills in English, with the ability to draft policies that are practical and actionable.

• Available approximately 2–3 days per week, with significant working-hour overlap with CET.

• Must reside within an EU time zone.

• Ability to invoice as a freelancer or contractor.

• Technical experience, familiarity with companies having under 200 employees, ISO 27001 experience, and certifications such as CISA, CISM, CIPP/E, or ISO 27001 Lead Implementer are advantageous.

🏝️ Benefits

• A genuine opportunity to construct a modern, progressive compliance system that adapts to and harnesses the potential created by the new AI landscape.

• A live, certified program with enterprise customers relying on it, along with the autonomy to implement enhancements.

• A documented foundation: runbooks for every manual control, a scheduling system that indicates upcoming tasks, and a comprehensive written handover from your predecessor.

• An AI-driven organization that is committed to funding and utilizing your creations.

• Direct access to decision-makers, ensuring no barriers between you and those who can instigate change.

• A competitive contractor rate.