Take primary responsibility for overseeing PlanetScale's FedRAMP readiness and ATO process from start to finish.
Act as the main compliance point of contact for all audits/assessments, including SOC 1 & 2, PCI, and FedRAMP, from preparation through external walkthroughs.
Establish, track, and report on key performance indicators and maturity metrics for audit and compliance programs.
Own and drive Sourcegraph's governance, risk, and compliance program, including SOC 2 and ISO 27001 certifications.
Manage audits end-to-end: evidence collection, control testing, stakeholder coordination, and remediation.
Support customer-facing compliance activities and tailor controls to fit Sourcegraph's fast-moving environment.
Sourcegraph builds AI-powered code search and batch change tools for engineering teams to manage complex codebases. It is a globally distributed team backed by a16z, Sequoia, and Redpoint, valuing high agency and customer love.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Own day-to-day compliance operations across SOC/PCI audits, GDPR/privacy, and BSA/AML/OFAC oversight.
Coordinate audits, evidence collection, and remediation with external auditors, control owners, and bank partners.
Develop risk-based compliance monitoring, testing, and documentation to maintain continuous audit readiness.
Zact is a fintech innovator dedicated to helping organizations simplify expense and payment management. It provides a fast-moving, hands-on environment where team members take ownership of execution.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Own SOC 2 end to end, run auditor relationships, and keep the program audit-ready year round.
Run risk management, policy, BC/DR, and vendor/subprocessor programs with automated evidence.
Lead security questionnaires and TPRM reviews to close deals and scale compliance across frameworks.
Aegis AI is a security company founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, now stopping adversarial AI attacks. The team is flat, flexible, and fast, with clear KPIs and a focus on owning decisions while moving at real-world speed.
Own global certification programs like ISO 27001 and SOC 2, and advise engineering teams on secure development.
Collaborate directly with engineers to audit cloud infrastructure, CI/CD pipelines, and AI-driven security controls.
Assess risks of emerging technologies and drive continuous compliance improvements across the organization.
Picus Security is an exposure validation company that proves what attackers can exploit and what defenses stop, turning exposures into defensible decisions. As a fast-growing global remote team, it values continuous security validation and has a 95% recommendation rate.
Lead compliance programs including SOC 2, GDPR, CCPA/CPRA, and Shopify partner security requirements.
Own security policies, risk management, business continuity, and incident response.
Manage IT operations, endpoint security, and cloud security across the company.
Rebuy revolutionizes shopping with intelligent, personalized experiences for DTC brands. They are a fully remote team with a culture rooted in ownership, drive, and empathy.
Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.
Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.
Act as part vCISO and account manager, guiding clients through security and compliance programs.
Assess security posture, provide recommendations, and design programs using NIST, SOC 2, and ISO 27001.
Liaise with auditors and internal teams to translate programs into policies, procedures, and configurations.
Oneleet provides a platform for companies to build, manage, and monitor cybersecurity programs and achieve SOC 2 and ISO 27001. It raised a $33M Series A and is a fast-growing, remote-first team with an opinionated culture.
Own and mature security, privacy, and compliance programs across HIPAA, SOC 2, and HITRUST.
Lead HITRUST certification end to end, including scoping, evidence collection, and assessor coordination.
Partner with Engineering, Product, SRE, and IT to integrate security into architecture, SDLC, and cloud infrastructure.
IntusCare is an end-to-end ecosystem built specifically to help PACE programs deliver exceptional care, strengthen financial performance, and stay compliant. It is a growing healthcare SaaS organization that empowers teams to improve outcomes for dual-eligible seniors.
Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audits from a technical perspective.
Translate security, compliance, and privacy requirements into scalable, enforceable, and auditable technical controls.
Develop internal security tooling using Python and implement cloud security controls across AWS and GCP.
Yuno builds payment infrastructure that enables companies to participate in the global market through seamless integrations and over 1,000 payment methods. Founded by payments and tech industry experts, it empowers high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus.
The company is hiring a Senior GRC and Compliance Manager to lead enterprise security compliance and governance programs through a partner platform. It provides a remote, team-oriented work environment with opportunities for professional growth and a comprehensive benefits package.
Own and mature internal and Managed GRC programs, including federal SSPs, POA&Ms, audits, and risk assessments.
Collaborate with CISOs, engineers, and control owners to translate compliance requirements into practical technical controls.
Lead and develop a GRC team while introducing automation and AI to improve scalability and consistency.
The company provides managed Governance, Risk & Compliance (GRC) and security assurance services, with a strong focus on federal security programs and frameworks like NIST, SOC 2, and CMMC. It supports a growing GRC team and emphasizes low-ego collaboration, automation, and AI-enabled approaches to scale delivery.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Act as the subject matter expert for Wiz's FedRAMP and DoD IL4/5 offerings, translating product value to internal and external stakeholders.
Engage with federal customers and mission owners to capture requirements, manage expectations, and support compliance processes.
Partner with Product and PMM to maintain the Wiz4Gov roadmap and prioritize features essential for U.S. Public Sector compliance.
Wiz is a cloud security company that connects code, cloud, and runtime into a single context to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and offers a culture that values world-class talent and creative freedom.
Represent the practice directly with customers through calls, webinars, and conferences to drive deals.
Map compliance frameworks like GDPR, NIST, PCI, and HIPAA to Zscaler capabilities control by control.
Build reusable playbooks and educate field teams to handle compliance conversations while protecting data.
Zscaler accelerates digital transformation by securing users, devices, and applications anywhere with its Zero Trust Exchange platform. The company operates the world's largest in-line cloud security platform across 200+ data centers, fostering a culture of ownership, collaboration, and customer obsession.
Own the compliance function as its sole occupant, reporting to the Head of Engineering and partnering with the Security Lead on policies, audits, and evidence.
Manage the Q&A library, customer security reviews, audit calendar, and third-party risk to keep Duvo reviewable for buyers and auditors.
Deliver precise, evidenced answers that stand up to hostile reviewers and keep the trust center and subprocessor list current.
Duvo builds an AI operations platform for large enterprises, enabling customers to create AI agents that automate business-critical processes across systems like SAP, spreadsheets, and supplier portals. The company is growing fast and values velocity, direct feedback, autonomy, and heavy use of AI tools.
Own the full security program, from application and infrastructure security to vulnerability management and incident response.
Maintain SOC 2 and drive future certifications like ISO 27001, managing evidence collection, auditors, and control assessments.
Oversee corporate IT, identity management, data privacy, and vendor security to build customer trust and support enterprise sales.
FullEnrich provides B2B data enrichment by orchestrating 20+ premium data providers to deliver complete contact information for sales and go-to-market teams. Founded in Paris and now headquartered in San Francisco, the company serves 6,000+ customers and is a team of 50+ across the US, Europe, LATAM, and Israel, with a fast-paced, ownership-driven culture.
Serve as the primary compliance point of contact for strategic partnerships and clients.
Lead the compliance workstream for major brand migrations and become an expert on the Regulated Compliance product.
Monitor compliance processes, ensure accurate documentation, and deliver presentations on compliance matters.
impact.com is the world's leading commerce partnership marketing platform, helping brands manage partnerships with affiliates, influencers, and creators. With over 5,000 global brands relying on the platform, the company fosters a flexible, performance-driven culture.