Compliance Manager

10a Labs

Compliance Manager overseeing SOC 2, GDPR, ISO 27001 compliance in a tech-focused organization. Collaborating with cross-functional teams to enhance security and privacy practices.

Posted 7/28/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $105,000 - $125,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing compliance programs across various frameworks such as SOC 2, GDPR, and ISO 27001, while effectively collaborating with cross-functional teams to implement security controls and maintain organizational compliance. Proficient in developing compliance metrics and delivering training to enhance security awareness throughout the organization.

Highest-signal resume keywords

SOC 2 Compliance ManagementGDPR UnderstandingISO 27001 ImplementationGovernance, Risk, and Compliance (GRC) PlatformsProject Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance Program ManagementSecurity Policy DevelopmentRisk AssessmentAudit ManagementSecurity Control Implementation

Soft Skills

Excellent Communication SkillsOrganizational SkillsAttention to Detail

Tools & Technologies

Amazon Web Services (AWS)Google Cloud Platform (GCP)VantaDrataSecureframe

Industry Keywords

CybersecurityInformation SecurityData PrivacyThird-Party Risk ManagementAI Governance

Tech Stack

Tools & technologies

AWSCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Own the company's compliance program across SOC 2, GDPR, ISO 27001, Cyber Essentials Plus, and additional security, privacy, and governance frameworks.
Lead all phases of external audits, certifications, and annual compliance assessments.
Develop, maintain, and continuously improve security policies, standards, procedures, and internal controls.
Partner with engineering and security teams to implement, document, and validate technical, administrative, and operational controls.
Manage evidence collection, audit readiness, and ongoing compliance activities using GRC platforms and internal tooling.
Coordinate enterprise risk assessments and track remediation efforts through successful completion.
Own third-party risk management, including vendor security reviews and due diligence.
Respond to customer security questionnaires, support enterprise procurement processes, and maintain customer trust documentation.
Build and maintain customer-facing compliance resources, including trust portals, security documentation, and compliance artifacts.
Monitor changes to global privacy and security regulations, recommending updates to policies and controls as requirements evolve.
Help develop and operationalize AI governance practices aligned with emerging regulations and industry frameworks, including the EU AI Act and NIST AI Risk Management Framework.
Develop compliance metrics, dashboards, and executive reporting to communicate organizational risk and program maturity.
Deliver security awareness and compliance training across the organization.
Collaborate with engineers, analysts, and leadership to embed compliance throughout product development, infrastructure, and business operations.
Serve as the primary internal subject matter expert for compliance and governance initiatives.

Requirements

What you’ll need

Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, Business, Risk Management, Law, or a related field.
5+ years of experience in compliance, information security, governance, risk management, or audit.
Experience owning or managing SOC 2 compliance programs and external audits.
Strong understanding of GDPR and modern data privacy requirements.
Experience implementing and maintaining security controls aligned with frameworks such as ISO 27001, NIST CSF, CIS Controls, HIPAA, or similar.
Experience working with cloud environments such as Amazon Web Services (AWS) or Google Cloud Platform (GCP).
Experience using Governance, Risk, and Compliance (GRC) platforms such as Vanta, Drata, Secureframe, or similar.
Experience supporting customer security reviews and enterprise procurement processes.
Strong project management skills with the ability to manage multiple initiatives simultaneously.
Excellent written and verbal communication skills with both technical and non-technical audiences.
Exceptional organizational skills and attention to detail.

Benefits

Comp & perks

Salary Range: $105K–$125K, depending on experience and location
Bonus: Performance-based annual bonus
Professional Development: Support for conferences, continuing education, and professional certifications
Work Environment: Fully remote, U.S.-based
Health Benefits: Comprehensive health, dental, and vision coverage
Time Off: Generous PTO and paid holiday schedule
Retirement: 401(k) plan