Oversee the IT & Security team, including helpdesk workflows, project roadmaps, and cross-functional security initiatives.
Maintain audit-ready security and compliance processes, including identity access management, authentication standards, and disaster recovery.
Manage vendor relationships, evaluations, and contracts to ensure tools spend is carefully and thoughtfully managed.
People Data Labs is the trusted provider of workforce data, collecting and standardizing data to enable companies to build compliant data solutions. The company is a fully profitable, intentionally smaller remote team that values security and a fun, unhinged workplace.
Own and mature security, privacy, and compliance programs across HIPAA, SOC 2, and HITRUST.
Lead HITRUST certification end to end, including scoping, evidence collection, and assessor coordination.
Partner with Engineering, Product, SRE, and IT to integrate security into architecture, SDLC, and cloud infrastructure.
IntusCare is an end-to-end ecosystem built specifically to help PACE programs deliver exceptional care, strengthen financial performance, and stay compliant. It is a growing healthcare SaaS organization that empowers teams to improve outcomes for dual-eligible seniors.
Act as part vCISO and account manager, guiding clients through security and compliance programs.
Assess security posture, provide recommendations, and design programs using NIST, SOC 2, and ISO 27001.
Liaise with auditors and internal teams to translate programs into policies, procedures, and configurations.
Oneleet provides a platform for companies to build, manage, and monitor cybersecurity programs and achieve SOC 2 and ISO 27001. It raised a $33M Series A and is a fast-growing, remote-first team with an opinionated culture.
Own SOC 2 end to end, run auditor relationships, and keep the program audit-ready year round.
Run risk management, policy, BC/DR, and vendor/subprocessor programs with automated evidence.
Lead security questionnaires and TPRM reviews to close deals and scale compliance across frameworks.
Aegis AI is a security company founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, now stopping adversarial AI attacks. The team is flat, flexible, and fast, with clear KPIs and a focus on owning decisions while moving at real-world speed.
Lead compliance programs including SOC 2, GDPR, CCPA/CPRA, and Shopify partner security requirements.
Own security policies, risk management, business continuity, and incident response.
Manage IT operations, endpoint security, and cloud security across the company.
Rebuy revolutionizes shopping with intelligent, personalized experiences for DTC brands. They are a fully remote team with a culture rooted in ownership, drive, and empathy.
Lead and mature cybersecurity compliance programs including SOC 2 Type 2 and ISO 27001 readiness.
Drive cloud and application security across AWS and Azure, integrating secure SDLC and DevSecOps practices.
Manage corporate IT operations, identity and access, and build the cybersecurity team as the organization grows.
Genea is a leader in property technology, providing cloud-based physical security, submeter billing, and on-demand HVAC solutions to over 1 million users across 39 countries. It has been recognized as a Top Workplace from 2021-2025 with a 4.3 Glassdoor rating, fostering a team-oriented and transparent culture.
Guide customers through setup and go-live, ensuring they reach their first audit milestone.
Collaborate with founders, CTOs, and security teams to map goals to actionable milestones.
Own next steps when stuck, partnering with internal teams to keep the project moving.
Sprinto is an autonomous trust platform that centralizes compliance, audits, risk management, and more for organizations worldwide. Backed by top investors, it serves over 4,000 companies in 75+ countries and fosters a remote-first, ownership-driven culture.
Own day-to-day IT operations, endpoint security, and support across Cordance HQ and its business units.
Administer identity, access, endpoint, and cloud environments including Microsoft 365, Google Workspace, AWS, and security tooling.
Manage MSPs, drive business unit integrations onto HQ-managed platforms, and support SOC 2 compliance evidence.
Cordance accelerates the growth of B2B SaaS companies through acquisition and long-term tactical and financial guidance. It is an experienced team of operators with a passion for software, partnering with founders to scale businesses and build lasting value.
Own the compliance function as its sole occupant, reporting to the Head of Engineering and partnering with the Security Lead on policies, audits, and evidence.
Manage the Q&A library, customer security reviews, audit calendar, and third-party risk to keep Duvo reviewable for buyers and auditors.
Deliver precise, evidenced answers that stand up to hostile reviewers and keep the trust center and subprocessor list current.
Duvo builds an AI operations platform for large enterprises, enabling customers to create AI agents that automate business-critical processes across systems like SAP, spreadsheets, and supplier portals. The company is growing fast and values velocity, direct feedback, autonomy, and heavy use of AI tools.
Build and run internal IT infrastructure, identity and access, device fleet, and SaaS tooling for a fully remote company.
Establish reliable IT processes and collaborate with Security and Engineering to meet SOC 2 and ISO 27001 standards.
Own endpoint security and device posture management with tools like JumpCloud, Google Workspace, and Cloudflare.
Consensys is an independent blockchain infrastructure company and a leading developer behind the Ethereum ecosystem. It operates across the US, Europe, and Australia with a fully remote, globally distributed team that values impact over hours.
Own and improve Zen's internal IT systems and security, focusing on automation and scalability.
Manage identity and access, SaaS estate, device fleet, and compliance processes.
Build security policies and incident response, ensuring a clear, defensible posture.
Zen Educate uses technology to help schools save money and educators find rewarding work, aiming to improve education efficiency. With around 600 employees across the UK and US, the company values a sustainable pace, diverse perspectives, and inclusive culture.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Maintain and enhance Anovia's ISO/IEC 27001 ISMS, including policies, controls, risks, and audit coordination.
Support SOC 2, HIPAA, and other compliance programs, including vendor assessments, vulnerability management, and incident response.
Lead ambiguous technical and operational initiatives from planning through implementation, coordinating stakeholders and driving completion.
Anovia is an industry-leading technology outsourcing support provider specializing in workflow and knowledge processes, technical support, helpdesk, and multilingual services. With over 200 experts globally, we serve Fortune 500 companies and value growth, learning, and work-life balance.
Lead ISO 27001 and SOC 2 audit cycles end-to-end, owning compliance and audit.
Own customer trust by responding to security questionnaires and representing InfoSec to enterprise clients.
Drive risk management, vendor security, and incident response while building AI-assisted workflows.
We are the first AI-native Employee Experience Platform, helping organizations unlock inspirational communication. Our diverse team of 550+ employees supports over 1,500 customers, and we are a unicorn company valued at over $1 billion.
Own and drive Sourcegraph's governance, risk, and compliance program, including SOC 2 and ISO 27001 certifications.
Manage audits end-to-end: evidence collection, control testing, stakeholder coordination, and remediation.
Support customer-facing compliance activities and tailor controls to fit Sourcegraph's fast-moving environment.
Sourcegraph builds AI-powered code search and batch change tools for engineering teams to manage complex codebases. It is a globally distributed team backed by a16z, Sequoia, and Redpoint, valuing high agency and customer love.
Own the IT roadmap, identity and access management, and SaaS/endpoint operations.
Partner with Engineering, People Operations, Security, and Finance to deliver reliable IT services.
Build scalable processes, automation, and vendor management to support a growing remote-first organization.
Benepass provides a customizable fintech platform that lets companies design, administer, and track employee benefits and perks. Backed by over $75M in funding and named an Inc. Best Workplace, the company values flexibility, inclusion, and innovation.
Own identity and endpoint security, including access management, device standards, and risk assessments.
Administer SSO, enforce MFA, manage MDM/EDR, and automate security workflows.
Act as a first responder for incidents, conduct vendor reviews, and build scalable security processes.
Squads is a financial technology company building products and APIs for the stablecoin economy. More than 450 teams use Squads Multisig to secure over $10 billion in value.
Own the end-to-end management, operation, and security of flagship client-facing SaaS products hosted on AWS.
Lead platform availability, performance, and SOC 2 compliance, acting as senior escalation point for incidents.
Mentor and lead a platform engineering team, partnering with Information Security, Product, and client-facing teams.
Real Chemistry is a global healthcare communications and marketing agency that uses deep scientific expertise, human-centered creativity, and AI-driven insights to transform healthcare. The company is Great Place to Work® certified and fosters a collaborative culture, with a focus on employee well-being and professional growth.
Lead and mentor a growing GRC team, establishing priorities and developing compliance functions.
Oversee SOC 1, SOC 2, and HITRUST CSF compliance programs, audits, and control libraries.
Manage AI governance, privacy, third-party risk, and customer security assurance initiatives.
This partner company operates in healthcare technology, focusing on data protection and compliance. It is a high-growth remote-first organization with a small but growing GRC team, emphasizing practical controls and embedded security.
Drive implementation and continuous improvement of ISO 27001 ISMS and SOC 2 Type II compliance.
Own risk management, internal audits, security policies, and vendor security assessments.
Collaborate with engineering and DevOps on AWS security governance, incident response, and AI/LLM risk governance.
Insider One is an AI-powered marketing and customer engagement platform that unifies data, personalization, and journey orchestration across channels. With 1,500+ employees from 50+ nationalities and offices in over 30 countries, it is a diverse, socially progressive B2B SaaS unicorn backed by major investors.