Nametag

Compliance

• Own and maintain SOC 2 Type II certification, including evidence collection, control monitoring, and audit coordination
• Drive IAL3 compliance readiness and implementation
• Manage accessibility compliance (WCAG) requirements
• Identify and pursue additional certifications as needed based on customer and market requirements
• Coordinate penetration testing cycles and drive remediation with engineering
• Maintain a living view of organizational risk and surface it to leadership
• Develop and maintain security policies, procedures, and controls
• Respond to security incidents with speed and clarity
• Respond to customer security questionnaires promptly and accurately
• Support sales in security-sensitive enterprise deals
• Maintain public-facing trust documentation
• Participate in customer security calls and reviews as needed
• Partner with engineering to build security into the development process
• Provide clear security guidance and timely reviews so teams can ship with confidence
• Collaborate with product on security and accessibility features
• Work with customer success to address customer security concerns

Head of Compliance, GRC