Senior Compliance Specialist

To enhance the compliance portfolio, the full-time Senior Compliance Specialist will manage existing programs for SOC 2, ISO 27001, GDPR, and lead new compliance initiatives, including federal requirements, while working remotely. Key responsibilities Oversee the operation and continuous improvement of compliance programs, ensuring audit readiness and tracking obligations Lead internal audits and the pursuit of CMMC certification, identifying gaps and driving remediation efforts Manage the enterprise risk program, including maintaining the risk register and facilitating risk assessments Required qualifications 5+ years of experience in GRC, information security compliance, or audit with direct ownership of compliance programs Proven experience with agency-specific ATOs and managing compliance and monitoring requirements Hands-on experience with Vanta or similar GRC platforms for compliance management Strong knowledge of CMMC, NIST SP 800-171, GDPR, and CPRA, with practical experience in privacy compliance Degree in information security, computer science, or a related field, or equivalent practical experience