Senior Manager, Compliance Operations

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of the daily management of SOC 2 compliance audit requirements, encompassing readiness, fieldwork, and remediation cycles.

• Collaborate with auditors and internal stakeholders to ensure timely and accurate evidence collection and audit responses.

• Implement and enhance security compliance tooling to meet audit and trust center requirements.

• Continuously monitor control performance and identify gaps or exceptions prior to audit findings.

• Preserve audit documentation, evidence repositories, and control narratives.

• Assist in strategy, control evaluation, and project management for Sarbanes-Oxley compliance initiatives.

• Lead control evaluation and gap assessments in preparation for ISO 27001 readiness and certification.

• Project-manage cross-functional compliance uplift workstreams, including timelines, milestones, and accountability.

• Work with engineering, IT, finance, and business teams to collect and validate evidence.

• Cultivate relationships with control owners and optimize recurring evidence collection through automation.

• Report risks, control weaknesses, and resource gaps to compliance leadership.

• Maintain control inventories, ownership mappings, and audit calendars utilizing tooling and automation.

• Document compliance processes and create playbooks.

• Keep abreast of regulatory and framework changes that impact controls and programs.

⛳️ Requirements

• Over 5 years of experience in compliance operations, IT/security compliance, auditing, or a related field.

• Solid background in compliance and privacy, with hands-on experience supporting SOC 2 audits.

• Practical knowledge of SOX and ISO 27001 frameworks, or a proven ability to quickly learn and apply new frameworks.

• Capability to manage multiple audit and uplift workstreams concurrently.

• Strong project management abilities.

• Experience in collaborating cross-functionally with engineering, IT, and business teams to gather evidence and promote control ownership.

• Comfortable using systems such as AWS, Jira, GitHub, HubSpot, Google Workspace, and Slack.

• Exceptional written communication skills, able to convey technical and regulatory details to non-specialist audiences.

• Keen attention to detail and a strong sense of personal accountability for the accuracy and completeness of compliance records.

• Previous experience in a startup or high-growth environment (preferred).

• Familiarity with compliance automation or GRC tooling (preferred).

• Knowledge of GDPR, CCPA, or HIPAA (preferred).

• Experience preparing for or supporting a company’s first SOC 2, SOX, or ISO 27001 certification (preferred).

• Must have authorization to work in the United States without current or future employer-sponsored visa sponsorship.

🏝️ Benefits

• Full-time position.

• Target annual bonus of 15% of base salary.

• Participation in long-term incentive programs linked to company growth and performance.

• Fully remote work environment.

• Home office set-up allowance.

• No pre-set vacation limits.

• Parental leave benefits.

• Competitive health and wellness benefits.

• 401(k) plan with employer contributions.

• Opportunities for learning and professional growth.