Be the first point of communication for any security-related matters
Communicate with others via Slack and with external security teams via email / Zoom / Teams
Fill out security questions in a timely manner, and if necessary jump in after hours / on weekends for time-sensitive compliance projects (We’ll keep these at a minimum)
Collaborate with other teams to find answers, if necessary
Collaborate with other teams to ensure any requirements or changes to processes or infrastructure are implemented
Ensure the filling out of security forms is efficient and quick
Create artifacts that help sales team communicate with external security teams e.g. our AI Governance practices
Be the first point of contact for the SOC2 / ISO auditors
Lead our annual SOC2 compliance and review (around 8 weeks part-time)
Ensure we are following security practices necessary to pass SOC2 compliance in an efficient manner (throughout the year, depending on time available)
Use Confluence and Jira heavily, and you’ll use other tools required for evidence preparation
Strive to understanding of business context and correlate the effort required for compliance initiative with business impact
Review and maintain policy documents
Research and write policy documents and updates to existing documents as they are needed
Ensure controls are in place for compliance with policy documents
Monitor compliance throughout the year and work with other teams to ensure they remain compliant
Help with legal contract review and compliance
Manage performance review software

Requirements

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field. Relevant professional certifications (e.g., CISA, CISSP, CISM) are a plus.
Minimum of 2 years of experience in managing or leading SOC2 compliance efforts, including preparation for audits and maintaining ongoing compliance.
Proven track record of efficiently completing security questionnaires for SaaS or technology companies.
Excellent verbal and written communication skills, with the ability to convey complex security and compliance concepts to diverse audiences.
Exceptional attention to detail and accuracy in documentation and reporting.
Strong analytical and problem-solving skills, with the ability to develop innovative solutions to complex compliance challenges.
Nice to have: Strong understanding of cloud infrastructure (e.g., AWS, Azure, GCP) and security best practices if security work is necessary. Demonstrated experience in designing and implementing scalable processes for evidence collection and management to support compliance initiatives. Experience working cross-functionally with various teams, such as IT, Legal, and Product, to ensure company-wide compliance with security standards.

Benefits

You'll have a base salary of $80,000-$100,000 per year (negotiable, and depends on level of experience), plus employee stock options.
You'll enjoy flexible working hours. Work late, work early, it's up to you how to plan your week
You can work remotely from anywhere in the world during 1-2 months a year
You'll work remotely in comfort. We'll pay $400 per month towards a private or a shared office space (tax free)
You’ll gain exposure to some of the world’s top tech brands, and be the one to build relationships with them!
You will be a part of a smart and high performing team that makes sure to have fun as well as work hard
We organize regular team activities, as well as a weekly Friday sessions where we bond as a team and learn about topics like "mushroom growing", "work while living in a camper van" or "growing up behind the Iron Curtain", or play a fun game
You’ll bond with the team in the annual team retreat. We've taken our entire team to both Hawaii and New Zealand in the past!

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills

SOC2 complianceISO compliancesecurity questionnairescloud infrastructureevidence collectionpolicy documentationsecurity practicescompliance monitoringcontract review

Soft skills

communication skillsattention to detailanalytical skillsproblem-solving skillscollaborationtime management

Certifications

CISACISSPCISM