Security Compliance Specialist

Security Compliance and Governance:

• Own security and privacy compliance programs across frameworks such as SOC 2, HIPAA, GDPR, ISO 27001, and PCI DSS.
• Build and maintain compliance roadmap and calendar.
• Maintain and continuously improve the policy set, including access control, asset management, vendor risk, and incident response.

Cross‑Functional Partnership and Risk Management:

• Act as the primary point of contact for external auditors, assessors, and compliance vendors.
• Partner with the Security Engineer and infra team.
• Advise on risk, surface critical issues early, and drive remediation projects to completion.