Group Security & Compliance Manager

This is a fully remote position, open to applicants in Argentina, +6 more countries.

📋 Description

• Lead customer security evaluations, RFPs, RFIs, and questionnaires, providing accurate and comprehensive responses swiftly to ensure deals progress.

• Establish and manage a customer-facing trust portal (such as SafeBase, Vanta, Drata, or similar), featuring a specific section for AI/ML.

• Oversee the management of the SOC 2 Type II program, facilitating audits across portfolio companies (including Sparkrock's Type II transition and CXT scoping), coordinating documentation with the Senior Group Security Engineer, and nurturing auditor relationships.

• Create and sustain security policies and documentation, which includes Data Processing Agreements (DPAs), sub-processor lists, and incident communication templates.

• Take charge of AI compliance and trust, encompassing AI questionnaire responses, management of AI sub-processors, tracking frameworks (EU AI Act, ISO 42001, NIST AI RMF), AI usage disclosures, AI acceptable use policies, and AI incident communication playbooks.

• Conduct third-party vendor security assessments and manage renewals.

• Develop and deliver internal security awareness training, as well as onboard customers through the necessary security configurations.

• Compose and coordinate customer-facing incident communications, including breach and incident notifications alongside legal and engineering teams.

⛳️ Requirements

• Minimum of 6 years in security GRC, customer trust, or SaaS compliance.

• Exceptional verbal and written English skills. Poised, eloquent, and credible during live interactions with enterprise customers and third parties — this individual represents the organization externally.

• Experience with SOC 2 audits as a primary contact (Type II strongly preferred).

• Fundamental understanding of cloud security concepts — able to interpret and explain technical findings, but not to produce them.

• Awareness of the AI compliance landscape with a readiness to take ownership of it.

• Relevant certifications such as CISSP, CISA, or CIPP/E; familiarity with Vanta, Drata, or SafeBase.

• Background in PE-backed or multi-portfolio environments.

• Familiarity with ISO 42001, NIST AI RMF, and awareness of the EU AI Act.

🏝️ Benefits

• We operate fully remotely and globally. Enjoy your best life wherever you are, without missing career opportunities.

• Flexible working hours. We work asynchronously and value results over when you're online, ensuring you're available for our customers.

• Committed to your growth with regular and meaningful feedback, support for achieving your personal career objectives, and access to cutting-edge tools, playbooks, and technology to enhance your experience.

• Opportunities to connect with thought leaders in the field and participate in webinars on the latest technology trends.

• Stipend provided to help create your ideal home office.

• Emphasis on culture: engage in coffee chats, happy hours, cooking classes, book clubs, and more!