Security and Compliance Manager

We are seeking a Security and Compliance Manager to own the day-to-day operation of our compliance program end to end, keeping our frameworks audit-ready, our policies current, and our workforce systems locked down. This is a critical role for someone who can manage our compliance platform of record, drive remediation on failing controls to closure, and administer the workforce security layer (Google Workspace and MDM) that our compliance posture depends on.

What You Will Do

Own our compliance platform of record — manage frameworks (SOC2 Type II, HIPAA, NIST, etc.), controls, tests, policies, and integrations. Monitor compliance tests continuously; triage failures, remediate directly where possible, and drive owners to resolution where not.

Why It Might Be a Fit

We believe a successful compliance function is defined not by simply passing audits, but by continuous audit-readiness, strong workforce security hygiene, and trust earned with enterprise customers.

Requirements

• 3+ years of experience in security compliance, GRC, IT security administration, or similar roles.
• Hands-on experience administering a compliance automation platform (e.g., Vanta, Drata, or Secureframe), including frameworks, tests, policies, and remediation workflows.
• Direct experience with SOC2 Type II and/or HIPAA compliance programs — evidence collection, audits, and continuous control operations.
• Experience administering Google Workspace in a business environment (user lifecycle, security settings, access controls).
• Experience managing an MDM solution (e.g., Kandji, Jamf, Mosyle, or similar) for endpoint compliance.
• Ability to write, maintain, and operationalize security policies and compliance documentation.
• Strong organizational and follow-through skills — comfortable owning remediation from detection to closure.

Benefits

• Base salary: $110,000–$165,000
• Equity
• Healthcare coverage (medical, dental, vision)
• Unlimited PTO
• 401(k) with company match plus Roth option