Semaphore Corporation

Security Engineer

• Own Semaphore's SOC 2 and ISO 27001 readiness, evidence collection, and audit coordination.
• Keep policies, controls, procedures, and supporting documentation current and practical.
• Track compliance gaps and coordinate follow-through with the right owners.
• Handle customer security questionnaires, compliance requests, and vendor assessments with clear, reusable materials.
• Maintain practical risk, vendor review, privacy, and DPA workflows so customer commitments and internal practices stay aligned.
• Partner with Engineering and Infrastructure on technical control validation, penetration testing, access reviews, and cloud/on-prem governance.
• Keep security and compliance processes lightweight, clear, and owned, including emerging governance needs around internal AI use.

Security and Compliance Manager