Own and scale the company’s SaaS security and compliance program, aligning to frameworks such as SOC 2, ISO 27001, NIST, and GDPR.
Define and implement security policies, standards, and controls to meet regulatory and business requirements.
Lead risk management efforts, including third-party risk assessments, control testing, and gap analysis.
Drive audit readiness and execution, coordinating evidence collection and remediation for internal and external audits.
Embed security and compliance requirements into engineering, infrastructure, and operational workflows.
Partner cross-functionally with engineering, legal, and business teams to align on security and compliance goals.
Partner with engineering to implement technical safeguards (e.g., access controls, logging, encryption) and automate compliance processes.
Continuously monitor evolving threats and regulations, proactively strengthening the company’s security posture.

Requirements

Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience.
4+ years of experience in information security, compliance, or related technical roles.
Strong knowledge of security frameworks and regulations (e.g., ISO 27001, SOC 2, NIST, PCI-DSS, HIPAA, GDPR).
Hands-on experience with cloud environments (AWS, Azure, or GCP) and related security services.
Familiarity with auditing, logging, monitoring, SCA, DAST, SAST and vulnerability management tools.
Excellent documentation, communication, and collaboration skills.
Security certifications (e.g., CISSP, CISM, CISA, CCSK, or equivalent) preferred.
Experience with automation tools for compliance (e.g., Terraform, Cloud Custodian, or compliance-as-code frameworks)
Background in DevSecOps or secure software development practices preferred.
Manual Dexterity: Repetitive motion of wrists, hands and fingers for using a computer.
Stationary Tasks: Sitting for extended periods, remaining in a stationary position.

Benefits

401k and medical/dental coverage
Comprehensive benefits package

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

information securitycompliancerisk managementsecurity frameworkscloud environmentsvulnerability managementDevSecOpsautomation toolssecurity policiestechnical safeguards

Soft Skills

documentationcommunicationcollaboration

Certifications

CISSPCISMCISACCSK