Senior Manager, Compliance Operations

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the daily management of SOC 2 compliance audit requirements, encompassing readiness, fieldwork, and remediation cycles.

• Collaborate with auditors and internal stakeholders to ensure timely and accurate collection of evidence and responses to audits.

• Enhance and implement security compliance tools for auditing and trust center purposes.

• Continuously monitor control performance and identify any gaps or exceptions prior to audit findings.

• Maintain documentation related to audits, evidence repositories, and control narratives.

• Assist in strategy development, control evaluation, and project management for Sarbanes-Oxley compliance initiatives.

• Lead evaluations and gap assessments for ISO 27001 readiness and certification controls.

• Manage cross-functional uplift workstreams, including timelines, milestones, and accountability among stakeholders.

• Collaborate with engineering, IT, finance, and business teams to gather and authenticate compliance evidence.

• Build strong relationships with control owners to streamline the process of recurring evidence collection.

• Report risks, control weaknesses, and resource gaps to compliance leadership.

• Maintain control inventories, ownership mappings, and audit calendars utilizing tools and automation.

• Document compliance processes and create playbooks.

• Track regulatory and framework changes that impact controls and programs.

⛳️ Requirements

• 5+ years of experience in compliance operations, IT/security compliance, auditing, or a related discipline.

• Robust background in compliance and privacy, with direct experience in supporting SOC 2 audits.

• Familiarity with SOX and ISO 27001 frameworks, or demonstrated capability to quickly learn and apply new frameworks.

• Ability to manage multiple audit and uplift workstreams at once.

• Strong project management capabilities.

• Experience collaborating cross-functionally with engineering, IT, and business teams to gather evidence and enhance control ownership.

• Proficient with systems such as AWS, Jira, GitHub, HubSpot, Google Workspace, and Slack.

• Excellent written communication skills, with the ability to convey technical and regulatory details to non-specialist audiences.

• High attention to detail and a strong sense of personal accountability for the accuracy and completeness of compliance records.

• Experience in a startup or high-growth environment (preferred).

• Experience with compliance automation or GRC tools (preferred).

• Knowledge of GDPR, CCPA, or HIPAA regulations (preferred).

• Experience in supporting a company's initial SOC 2, SOX, or ISO 27001 certification (preferred).

• Must be authorized to work in the United States without current or future company-sponsored immigration.

🏝️ Benefits

• Full-time employment.

• Target annual bonus of 15% of base salary.

• Participation in long-term incentive programs linked to company growth and performance.

• Fully remote working environment.

• Home office setup allowance.

• No predetermined vacation limits.

• Benefits for parental leave.

• Health and wellness benefits.

• 401(k) plan with employer contributions.

• Opportunities for learning and professional growth.