Own the complete internal audit lifecycle, from initial kickoff through final reporting.
Review and assess customer evidence against ISO 27001 controls.
Conduct customer discussions to explain audit findings and provide recommendations.
The company provides security compliance services, helping organizations achieve and maintain industry-leading standards. It operates as a remote-first environment where ownership, expertise, and clear communication are highly valued.
Manage internal audits and support external compliance assessments across business functions.
Perform gap analyses and track remediation actions for compliance frameworks.
Maintain and improve compliance documentation, policies, and risk registers.
Our partner is a growing SaaS organization serving global industries. It fosters a collaborative and inclusive culture with a focus on employee development and well-being.
Support the ISO 27001 program by maintaining audit readiness, running evidence collection, and managing access reviews.
Perform recurring security operations including vulnerability scanning, risk assessments, and vendor reviews.
Collaborate cross-functionally to harden identity and access management, respond to security questionnaires, and support AI governance initiatives.
Didomi is a consent management platform that helps companies manage user consent and data privacy. The company is a growing SaaS organization with a collaborative culture, emphasizing automation and efficiency.
Serve as a hands-on GRC advisor for customers, guiding them through risk assessments, audit preparation, and control rollouts.
Help customers navigate audits like SOC 2, ISO 27001, HIPAA, PCI-DSS, and NIST, translating requirements into practical steps.
Spot GRC complexity early and partner with Support and Customer Success to own escalations requiring real GRC expertise.
Compyl is a GRC and automated security compliance platform built by security practitioners. Backed by Venture Guides, Contour Venture Partners, and Armory Square Ventures, it is a high-growth Series A company.
Own and run the ISMS, lead ISO 27001 certification, and manage risk, policies, and audits end-to-end.
Handle customer security questionnaires, RFIs, and supplier audits independently as the sole security expert.
Manage GDPR compliance, including DPAs, subprocessor lists, vendor reviews, and DSARs with operational ownership.
Cosuno is a fast-growing tech startup revolutionizing the construction industry through a digital platform for tenders and procurement, using AI to analyze price data and create efficient bids. They are a lean, 100-person team with a culture of high autonomy, pragmatism, and AI-first thinking, offering a remote-first work environment.
Manage and support compliance certifications including SOC 2, HITRUST, and ISO 27001 audits across the audit lifecycle.
Serve as the subject matter expert across the company on compliance frameworks and primary point of contact for external auditors.
Maintain the risk register, drive risk identification and reporting, and scale GRC function with AI and automation.
Garner transforms the healthcare economy by partnering with employers to redesign healthcare benefits using data-driven insights. It is a fast-growing healthcare technology company with a mission-driven team focused on making healthcare more affordable and high-quality.
Own and manage the compliance program including SOC 2 and ISO 27001 readiness and audits.
Lead risk assessments, control testing, and enterprise risk management processes.
Partner with Engineering, Security, Product, Legal, HR, and Operations to embed compliance into business processes.
Calendly is a scheduling platform used by millions to automate meetings and streamline time management. They are a rapidly growing SaaS company fostering a culture of learning and high performance.