Security & Compliance Lead - Remote

Overview

This role is a high-impact position responsible for leading security governance, compliance operations, and customer trust initiatives. The Security & Compliance Lead will partner closely with engineering, legal, and leadership teams to build scalable security practices, embed compliance early in product development, and maintain regulatory readiness.

In Short

• Manage day-to-day operations of SOC 2 Type II compliance.
• Serve as the security and compliance subject matter expert.
• Coordinate annual third-party penetration testing.
• Maintain and update the customer-facing Trust Center.
• Review procurement and vendor contracts.
• Respond to security questionnaires and due diligence requests.
• Collaborate with Legal on regulatory requirements.
• Conduct risk assessments and improve security policies.
• Promote security awareness and secure-by-default practices.
• Stay informed about emerging threats and compliance obligations.

Requirements

• Experience in security governance and compliance.
• Strong understanding of SOC 2 Type II requirements.
• Knowledge of risk assessment methodologies.
• Ability to translate complex policies into actionable processes.
• Experience with vendor contract review.
• Strong communication and collaboration skills.
• Ability to work in a fast-paced, remote-first environment.
• Experience in promoting security awareness.
• Familiarity with emerging security threats.
• Proven track record of improving security posture.

Benefits

• Work in a remote-first environment.
• Opportunity to lead high-impact security initiatives.
• Collaborate with cross-functional teams.
• Contribute to a culture of security awareness.
• Support sustainable growth of the organization.