Security and Compliance Manager

To maintain and strengthen information security and compliance programs, the full-time remote Security & Compliance Manager will oversee SOC 2 Type II compliance, lead ISO 27001 certification efforts, and partner with cross-functional teams to align security practices with regulatory requirements. Key responsibilities Maintain SOC 2 Type II compliance and lead the ISO 27001 certification process Establish and improve security controls, governance standards, and risk management practices Collaborate with Engineering, Product, and Operations to integrate security and privacy into business processes Required qualifications 3 to 5 years of experience in information security, data privacy, governance, or compliance Direct experience with SOC 2 Type II maintenance and ISO 27001 certification in a SaaS environment Hands-on experience with compliance automation tools like Vanta or similar platforms Strong knowledge of GDPR, CCPA, and other privacy regulations Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience