SOC 2 Compliance Manager

Location: Remote (U.S.) / Hybrid
Employment Type: Full-Time
Experience: 5+ Years
Industry: Cybersecurity / Governance, Risk & Compliance (GRC)

About the Opportunity

Merci Technologies is partnering with a client seeking an experienced SOC 2 Compliance Manager to lead the organization's compliance, governance, risk management, and audit readiness initiatives.

This role is ideal for a cybersecurity and compliance professional with expertise in SOC 2, security governance, risk assessments, internal controls, audit coordination, and information security compliance programs.

Key Responsibilities

• Lead and manage SOC 2 Type I and Type II compliance initiatives.
• Serve as the primary liaison between auditors, internal stakeholders, and external partners.
• Develop, implement, and maintain security policies, standards, and procedures.
• Monitor compliance with SOC 2 Trust Services Criteria.
• Conduct risk assessments and control effectiveness reviews.
• Coordinate evidence collection and audit preparation activities.
• Track remediation efforts and ensure timely closure of audit findings.
• Partner with IT, Security, Legal, HR, and Operations teams to maintain compliance.
• Develop compliance metrics, dashboards, and executive reporting.
• Maintain compliance documentation and governance frameworks.
• Support customer security questionnaires and due diligence requests.
• Assist with other compliance programs including ISO 27001, NIST, HIPAA, GDPR, and PCI-DSS, as applicable.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Business, Risk Management, or related field.
• 5+ years of experience in compliance, information security, GRC, or audit functions.
• Hands-on experience managing SOC 2 audits and compliance programs.
• Strong understanding of SOC 2 Trust Services Criteria.
• Experience with risk assessments, control testing, and remediation management.
• Knowledge of security frameworks including NIST, ISO 27001, and CIS Controls.
• Experience working with external auditors and compliance assessors.
• Strong project management and stakeholder management skills.
• Excellent written and verbal communication abilities.

Preferred Qualifications

• Certifications such as CISSP, CISA, CRISC, CISM, ISO 27001 Lead Implementer, or Security+.
• Experience with compliance platforms such as Vanta, Drata, Secureframe, AuditBoard, Archer, or ServiceNow GRC.
• Experience supporting cloud environments including Microsoft Azure, AWS, or Google Cloud.
• Knowledge of third-party risk management and vendor compliance programs.
• Experience supporting multiple regulatory and compliance frameworks.

Why Join This Opportunity?

• Lead enterprise-wide compliance and governance initiatives.
• Influence security strategy and regulatory readiness.
• Work directly with executive leadership and audit partners.
• Support a security-first culture within a growing organization.
• Opportunity to build and mature compliance programs from the ground up.

About Merci Technologies

Merci Technologies partners with organizations across multiple industries to identify and deliver exceptional talent in Cybersecurity, Cloud, Artificial Intelligence, Data & Analytics, Digital Transformation, Compliance, and Enterprise Technology.