Security Compliance Manager

📋 Description

• Own strategy, planning, design, and operation of security compliance and GRC across SOC 2 Type II
• Lead FedRAMP authorization efforts; coordinate NIST SP 800-53, third-party assessments, and
• Serve as primary contact for auditors, regulators, and external reviewers; ensure well-planned
• Collaborate with engineering, IT, product, security, and legal to implement controls and resolve
• Present objectives, scope, findings, risks, and outcomes to senior leadership and board

🎯 Requirements

• 7+ years in security compliance, GRC, audit, or related field with end-to-end audit/certification
• Experience managing SOC 2, PCI DSS, and/or ISO 27001 programs end-to-end.
• Deep knowledge of PCI DSS, SOC 2, ISO 27001, GDPR, CCPA, DORA; familiarity with NIST CSF and CIS
• Strong technical/product aptitude; ability to translate technical controls and risks into business
• Excellent written/verbal communication; capable of executive-ready documentation and
• Experience in fast-paced, regulated tech environments; fintech/payments preferred.

🎁 Benefits

• Remote-first culture with global distribution.
• Competitive compensation with equity; early exercise options.
• Flexible paid time off and year-end company break.
• Health, dental, vision insurance for employees and dependents (US/Canada).
• 4% 401(k)/RRSP matching (US/Canada).
• MacBook Pro delivered to home; home office stipend; meal and social stipends.