Lead external compliance exams (SOC 2, ISO 27001) end-to-end, including evidence, auditor negotiation, and readiness.
Own customer security diligence, questionnaires, audits, and trust-center content while setting response standards.
Manage third-party risk operations and the agent platform for automated customer and vendor assessments.
Chainguard provides hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. It is a venture-backed company serving Fortune 500 enterprises and global industry leaders like OpenAI and Snowflake.
Own and drive the SOC 2 compliance program, including annual audits and certification.
Manage the risk register, vendor risk, BCP/DR, and policy lifecycles.
Lead customer security reviews and respond to complex security questionnaires.
Bluesight creates groundbreaking solutions that increase efficiency, safety, and visibility for health systems, hospital pharmacies, and pharmaceutical manufacturers. It is a high-growth healthcare IT company with a start-up vibe and over 3,000 customers.
The company is hiring a Senior GRC and Compliance Manager to lead enterprise security compliance and governance programs through a partner platform. It provides a remote, team-oriented work environment with opportunities for professional growth and a comprehensive benefits package.
You will conduct security control testing and evaluations across SOC 2, ISO 27001, and PCI DSS frameworks.
You will coordinate evidence collection and technical walkthroughs with Engineering, DevOps, IT, and system owners.
You will identify control gaps, assess risks, and support remediation plans in the GRC platform.
Jobgether is an AI-powered job matching platform that connects candidates with hiring companies through objective, skills-based reviews. It operates with a remote-first approach and uses technology to streamline recruitment and improve hiring outcomes.
Act as the first responder and security subject matter expert on customer and prospect calls.
Partner with Sales, Solutions, and Deal Desk to handle security requests and accelerate deal cycles.
Build and manage customer-facing security documentation and lead responses to security questionnaires.
Mimica is an AI-powered process intelligence platform that analyzes workflows and generates AI agents to automate tasks, helping enterprises reclaim time. The company has raised $26 million in Series B financing, is backed by Khosla Ventures, and employs a remote-first team distributed across 16+ countries.
Own and drive Sourcegraph's governance, risk, and compliance program, including SOC 2 and ISO 27001 certifications.
Manage audits end-to-end: evidence collection, control testing, stakeholder coordination, and remediation.
Support customer-facing compliance activities and tailor controls to fit Sourcegraph's fast-moving environment.
Sourcegraph builds AI-powered code search and batch change tools for engineering teams to manage complex codebases. It is a globally distributed team backed by a16z, Sequoia, and Redpoint, valuing high agency and customer love.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Drive new business development and own enterprise accounts for compliance services.
Build C-suite relationships and lead complex sales cycles from discovery to close.
Maintain accurate Salesforce pipeline and collaborate cross-functionally to exceed goals.
Coalfire helps clients solve their hardest cybersecurity challenges through advisory, assessment, and compliance services. The company is headquartered in Chicago with offices across the U.S. and U.K., and fosters a culture of passionate problem-solvers.
Plan, organize, and lead external audit projects related to group benefit examinations and contractual compliance reviews.
Serve as primary liaison between external auditors and internal business units, ensuring timely completion and accurate documentation of audit deliverables.
Monitor open audit items, assign tasks, and provide leadership to ensure compliance with organizational processes and standards.
Capital Blue Cross is a health insurance company that provides coverage and wellness services to its members. The company is consistently voted one of the Best Places to Work in PA, and its culture emphasizes flexibility, support, and community involvement.
Monitor and triage security alerts, coordinate incident response, and run tabletop exercises.
Maintain technical security controls including encryption, key/certificate management, and secrets rotation.
Support SOC 2 and GDPR compliance through vendor reviews, client questionnaires, and evidence collection.
Graphite is a technology-enabled growth agency that helps fast-growing companies like Masterclass, Notion, and BetterUp unlock sustainable revenue through content, SEO, and AEO. We are a fully distributed team across North America, Latin America, and Europe, obsessed with impact and delivering outcomes for clients.
Support the implementation and maintenance of client security compliance programs (SOC 2, ISO 27001, NIST CSF).
Manage evidence collection, policy updates, and audit readiness across multiple client engagements.
Collaborate with technical teams and stakeholders to identify risks, address control gaps, and improve security practices.
Our partner is a cybersecurity compliance firm that delivers governance, risk, and compliance programs for diverse clients, helping them establish security frameworks like SOC 2, ISO 27001, and NIST CSF. They are a fast-growing startup with a remote-first global team, emphasizing mentorship and professional development.
Own day-to-day compliance operations across SOC/PCI audits, GDPR/privacy, and BSA/AML/OFAC oversight.
Coordinate audits, evidence collection, and remediation with external auditors, control owners, and bank partners.
Develop risk-based compliance monitoring, testing, and documentation to maintain continuous audit readiness.
Zact is a fintech innovator dedicated to helping organizations simplify expense and payment management. It provides a fast-moving, hands-on environment where team members take ownership of execution.
Serve as the primary compliance point of contact for strategic partnerships and clients.
Lead the compliance workstream for major brand migrations and become an expert on the Regulated Compliance product.
Monitor compliance processes, ensure accurate documentation, and deliver presentations on compliance matters.
impact.com is the world's leading commerce partnership marketing platform, helping brands manage partnerships with affiliates, influencers, and creators. With over 5,000 global brands relying on the platform, the company fosters a flexible, performance-driven culture.
Own the full security program, from application and infrastructure security to vulnerability management and incident response.
Maintain SOC 2 and drive future certifications like ISO 27001, managing evidence collection, auditors, and control assessments.
Oversee corporate IT, identity management, data privacy, and vendor security to build customer trust and support enterprise sales.
FullEnrich provides B2B data enrichment by orchestrating 20+ premium data providers to deliver complete contact information for sales and go-to-market teams. Founded in Paris and now headquartered in San Francisco, the company serves 6,000+ customers and is a team of 50+ across the US, Europe, LATAM, and Israel, with a fast-paced, ownership-driven culture.
Lead client delivery across SOC 1, SOC 2, SOC 3, HIPAA/HITECH, HITRUST, and privacy advisory engagements.
Manage all phases of the client engagement lifecycle while building lasting relationships and ensuring quality outcomes.
Coach and mentor team members and contribute to business development in a practice growing over 30% year over year.
Aprio is a Top 20 CPA and advisory firm providing assurance, tax, and consulting services for fast-growing industries. With over 3,200 team members across 40 U.S. and international locations, it fosters a collaborative, entrepreneurial culture.
Take primary responsibility for overseeing PlanetScale's FedRAMP readiness and ATO process from start to finish.
Act as the main compliance point of contact for all audits/assessments, including SOC 1 & 2, PCI, and FedRAMP, from preparation through external walkthroughs.
Establish, track, and report on key performance indicators and maturity metrics for audit and compliance programs.
PlanetScale offers developers the fastest and most reliable Postgres and Vitess/MySQL databases, enabling businesses to handle data and workloads of all sizes. Backed by over $100M in venture financing and serving innovative companies like Block and Etsy, PlanetScale is a profitable, fast-growing company that builds small teams of top-tier individuals.
Lead SOC 2, TISAX, and DORA audit remediation initiatives to ensure findings are resolved within deadlines.
Manage enterprise risk assessments, control frameworks, and governance metrics including KRIs and dashboards.
Coordinate with business units, executives, and external auditors to strengthen compliance and drive proactive risk management.
The company is a B2B SaaS organization that prioritizes security, governance, and compliance across enterprise frameworks. It operates in a remote-first environment with a collaborative culture focused on innovation, accountability, and data-driven decision-making.
Review and negotiate commercial agreements such as NDAs, SaaS EULAs, DPAs, and SOWs.
Handle contract inquiries and support sales teams on contract language and acceptable revisions.
Manage contract data, coordinate stakeholders, and improve contract workflows.
Juniper Square is a private markets operations platform trusted by 2,300+ GPs, unifying technology, data, and fund administration. With 1,000+ employees, it fosters a culture of ambition, transparency, and high standards.
Own customer security reviews, compliance programs (SOC 2, ISO 27001), and audits with AI-assisted workflows.
Evaluate security requirements, vendor risks, and compliance gaps, and drive remediation to completion.
Build scalable processes, automation, and self-service resources to reduce repetitive GRC work.
A fast-moving technology company building scalable GRC and security processes in a remote-first environment. The organization values autonomy, ownership, and AI-powered efficiency, with a lean team and high-impact roles.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.