Support the implementation and maintenance of client security compliance programs (SOC 2, ISO 27001, NIST CSF).
Manage evidence collection, policy updates, and audit readiness across multiple client engagements.
Collaborate with technical teams and stakeholders to identify risks, address control gaps, and improve security practices.
Our partner is a cybersecurity compliance firm that delivers governance, risk, and compliance programs for diverse clients, helping them establish security frameworks like SOC 2, ISO 27001, and NIST CSF. They are a fast-growing startup with a remote-first global team, emphasizing mentorship and professional development.
Own the full security program, from application and infrastructure security to vulnerability management and incident response.
Maintain SOC 2 and drive future certifications like ISO 27001, managing evidence collection, auditors, and control assessments.
Oversee corporate IT, identity management, data privacy, and vendor security to build customer trust and support enterprise sales.
FullEnrich provides B2B data enrichment by orchestrating 20+ premium data providers to deliver complete contact information for sales and go-to-market teams. Founded in Paris and now headquartered in San Francisco, the company serves 6,000+ customers and is a team of 50+ across the US, Europe, LATAM, and Israel, with a fast-paced, ownership-driven culture.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Facilitate strategy, roadmap, and design workshops for medium to large service engagements.
Support business development by qualifying client needs, scoping projects, and presenting proposals.
Maintain subject matter expertise in multiple security domains and contribute to practice development.
AHEAD builds platforms for digital business by weaving together advances in cloud infrastructure, automation and analytics, and software delivery. The company fosters a culture of belonging and is an equal opportunity employer that values diverse perspectives.
Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.
SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company is well capitalized, growing quickly, and serves 13 of the top 15 U.S. banks.
Partner with business leaders to translate priorities into practical security and risk decisions.
Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.
Take primary responsibility for overseeing PlanetScale's FedRAMP readiness and ATO process from start to finish.
Act as the main compliance point of contact for all audits/assessments, including SOC 1 & 2, PCI, and FedRAMP, from preparation through external walkthroughs.
Establish, track, and report on key performance indicators and maturity metrics for audit and compliance programs.
PlanetScale offers developers the fastest and most reliable Postgres and Vitess/MySQL databases, enabling businesses to handle data and workloads of all sizes. Backed by over $100M in venture financing and serving innovative companies like Block and Etsy, PlanetScale is a profitable, fast-growing company that builds small teams of top-tier individuals.
Own and drive the SOC 2 compliance program, including annual audits and certification.
Manage the risk register, vendor risk, BCP/DR, and policy lifecycles.
Lead customer security reviews and respond to complex security questionnaires.
Bluesight creates groundbreaking solutions that increase efficiency, safety, and visibility for health systems, hospital pharmacies, and pharmaceutical manufacturers. It is a high-growth healthcare IT company with a start-up vibe and over 3,000 customers.
Own SOC 2 program end to end, including scoping, evidence, and auditor relationship.
Partner with engineering to embed security in the development lifecycle and manage vulnerabilities.
Act as customer-facing security expert, handling questionnaires and CISO calls.
Tonic.ai has been de-identifying sensitive data since 2018, with hundreds of enterprise customers including eBay and UnitedHealth Group. Security is core to our product, and we foster a culture of direct ownership and collaboration.
Translate technical topics into clear language for customer executives and security reviewers.
Plan and run projects across IT, Security, Compliance, Automation, and Infrastructure.
Own the pipeline of customer infrastructure, security, and compliance requests from intake to close.
Tessera Labs is redefining how enterprises modernize their most complex systems. Backed by Foundation Capital and built by leaders in AI and enterprise transformation, it is a high-growth startup delivering governed multi-agent AI for ERP modernization.
Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audits from a technical perspective.
Translate security, compliance, and privacy requirements into scalable, enforceable, and auditable technical controls.
Develop internal security tooling using Python and implement cloud security controls across AWS and GCP.
Yuno builds payment infrastructure that enables companies to participate in the global market through seamless integrations and over 1,000 payment methods. Founded by payments and tech industry experts, it empowers high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus.
Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
Perform technical tests, document results, and maintain work papers.
Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.
Lead cloud architecture engagements from discovery through delivery for Azure, AWS, and Google Cloud.
Design secure landing zones, hybrid solutions, and compliance-aligned architecture for regulated clients.
Mentor a team of architects and engineers while supporting pre-sales and technical strategy.
Aprio is a Top 20 CPA and advisory firm that brings together proven expertise, deep understanding, and strategic foresight for fast-growing industries. With 40 U.S. offices and over 3,200 team members speaking 60+ languages, it offers a top-rated culture and vast growth opportunities.
Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.
Act as the first responder and security subject matter expert on customer and prospect calls.
Partner with Sales, Solutions, and Deal Desk to handle security requests and accelerate deal cycles.
Build and manage customer-facing security documentation and lead responses to security questionnaires.
Mimica is an AI-powered process intelligence platform that analyzes workflows and generates AI agents to automate tasks, helping enterprises reclaim time. The company has raised $26 million in Series B financing, is backed by Khosla Ventures, and employs a remote-first team distributed across 16+ countries.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Lead the implementation and certification of Accela's ISO/IEC 27001:2022 program.
Manage risk assessments, controls, audits, and compliance documentation across cross-functional teams.
Drive compliance automation and evidence management using platforms like Drata.
Accela provides a cloud-based government software platform that helps agencies improve efficiency and transparency. For nearly 20 years, it has been an industry leader serving communities of all sizes, with a culture committed to diversity, equity, and inclusion.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Deliver governance, risk, and compliance engagements aligned with frameworks like ISO 27001, SOC 2, and NIST.
Conduct gap analyses, security posture assessments, and maturity reviews to identify improvement opportunities.
Guide clients through audit preparation, certification processes, and security programme implementation.
Jobgether is an AI-powered job matching platform that lists roles on behalf of partner companies. The hiring partner for this role offers a fully remote working environment and a collaborative culture with opportunities for professional growth.
Own and support key GRC programme components, including ISO 27001 and SOC 2 audits.
Lead risk assessments, third-party risk oversight, and control assurance activities.
Partner with Engineering, Privacy, Legal, and People teams to embed compliance requirements.
Ping Identity is a cloud identity security company serving more than half the Fortune 100 with secure, seamless digital experiences. Headquartered in Denver with global offices, it fosters a flexible, collaborative culture that champions every individual identity.