Risk and Compliance Lead

📋 Description

• Own end-to-end certification roadmaps (SOC 2 Type II, ISO 27001, ISO 42001) including scoping and audits
• Manage external auditors and annual audit calendar for timely cert renewals
• Maintain the security risk register with risk IDs, scoring, treatment, and residual reporting
• Build continuous compliance monitoring reflecting real-time control state
• Own audit artifacts such as ISMS, Statements of Applicability, risk assessments, and SSPs
• Run audits/readiness assessments and close remediation; partner on GDPR/privacy with Legal

🎯 Requirements

• 8+ years in security compliance/GRC with SOC 2 and/or ISO 27001 ownership
• Knowledge of SOC 2, ISO 27001, NIST CSF; map controls across frameworks
• Hands-on ISMS/SSP development or maintenance and audit-facing documentation
• Own a formal risk register with risk IDs, scoring, treatment, and leadership reporting
• Experience with GRC automation platforms (e.g., Vanta, Drata) and continuous monitoring
• GDPR/privacy familiarity to partner with legal and collaborate with external auditors

🎁 Benefits

• Competitive Salary & Equity
• 401(k) with a 4% match (US Only)
• Health, Dental, Vision and Life Insurance
• Short Term and Long Term Disability
• Paid Parental, Medical, Caregiver Leave
• Flexible Time Off (FTO) + Holidays