Head of Compliance

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Take full ownership of Treeline's compliance program from start to finish — including controls, evidence gathering, Vanta/Drata upkeep, and auditor coordination — guiding the process from gap assessment to certification.

• Develop and sustain security policies, risk registers, vendor evaluations, and ISMS documentation from the ground up.

• Collaborate with engineering, GTM, operations, and our portfolio companies to integrate security and compliance into Treeline's development and delivery processes.

• Act as the primary internal contact for all compliance-related inquiries, customer security questionnaires, and audit requests.

• Lead SOC 2 and ISO 27001 readiness initiatives from beginning to end — including scoping, gap analysis, control implementation, and audit preparation.

• Manage the relationship with audit partners and organize penetration testing as part of a comprehensive compliance service package.

• Work at every level: conduct technical deep-dives with security engineers and present roadmaps to founders and key stakeholders.

• Independently manage multiple simultaneous customer engagements — ensuring nothing falls through the cracks and everything stays on schedule.

• Contribute to the development and expansion of Treeline's Compliance-as-a-Service offering into a repeatable, revenue-generating product line.

• Establish the frameworks, scoping standards, and customer-facing documents that enhance compliance delivery scalability — ensuring that every engagement improves, not just increases in size.

• Relay insights gained in the field directly back into the platform — your customer interactions influence product decisions, rather than simply following them.

⛳️ Requirements

• 5–8+ years of experience in compliance, security, or risk management — with significant tenure at or alongside an audit or advisory firm (SOC 2 audit shop, Big 4 risk practice, compliance consultancy).

• Personally manage SOC 2 and ISO readiness projects from inception to completion, not merely providing support — you anticipate auditor inquiries ahead of time.

• Practical experience in creating compliance frameworks from scratch, rather than just maintaining existing programs.

• Strong familiarity with SOC 2 and ISO 27001; knowledge of FedRAMP is a plus.

• Preferred experience with Vanta or Drata — you are familiar with the platform, not just the concept.

• Exceptional project management skills — capable of juggling multiple engagements simultaneously without losing focus.

• Strong customer-facing communication abilities that are effective at all levels — comfortable interacting with a CISO as well as a small founding team.

• Motivated by building programs from the ground up — you find blank-page challenges inspiring rather than daunting.

• You view compliance as a business driver, not merely a checkbox — and you understand how to advocate for that perspective.

• Based in the US and willing to travel occasionally to customer locations as the program expands.

🏝️ Benefits

• Founding equity in an a16z-backed company that is transforming a $200B+ market — you’re joining at a pivotal moment, not after the fact.

• Your contributions directly influence what Treeline's engineering team incorporates into the platform — you are upstream of product decisions, not downstream.

• Work closely with Engineering and leadership; no bureaucratic layers or waiting for tickets to pursue your ideas.

• A team that prioritizes execution over hierarchy — small, collaborative, and genuinely innovating in a market that has lacked real progress for decades.

• Competitive base salary and equity.

• Comprehensive health, dental, and vision insurance coverage.

• Flexible PTO and a remote-first working environment.