Senior Compliance Engineer

📋 Description

• Own and operate our compliance programs (SOC 2, GDPR, HIPAA, DORA, DPDP as applicable) end-to-end —
• Be the primary point of contact for external auditors; manage audit timelines and evidence
• Own the risk assessment program — identify, assess, score, track, and report risks via a risk
• Manage vendor and third-party risk assessments and due diligence
• Respond to customer and prospect security questionnaires (RFPs, due-diligence requests
• Support Sales and Customer Success on security & compliance calls with prospects and customers

🎯 Requirements

• 4+ years in GRC/compliance engineering or related roles (compliance, audit, information security)
• Hands-on experience running SOC 2/ISO 27001 (or similar) audits end-to-end
• Strong understanding of data protection & privacy — GDPR, HIPAA, PII/PHI handling
• Proven ability to manage vendor/third-party risk assessments
• Excellent written and verbal communication — comfortable presenting to and negotiating with
• Experience responding to customer security questionnaires / RFPs

🎁 Benefits

• Experience with GRC automation platforms (Sprinto, Vanta, Drata, OneTrust)
• Relevant certifications (CISA, CRISC, ISO 27001 Lead Auditor/Implementer, CIPP)
• Experience in a B2B SaaS company handling enterprise customer data