Senior Compliance Expert

We are seeking a highly skilled Compliance Professional to lead our company's SOC 2 compliance efforts in SaaS environments.The ideal candidate will have expertise in compliance management platforms and proficiency in using Vanta's tools to streamline evidence collection, continuous monitoring, and security programs.This role requires strong coding fundamentals, system design capability, and the mindset of a builder who thrives in a dynamic startup environment.You will work in small, agile teams reporting directly to the CTO, collaborating closely with AI engineers, security leaders, and product managers to build and deliver AI-native services at startup speed.Our company is building an AI-centric operating system for utilities, harnessing AI at the enterprise level to better orchestrate customer delight, facilitate power optimization, enhance grid health, and unlock flexibility at scale.This innovative project has significant potential for growth and development.ResponsibilitiesSOC 2 Compliance Management: Lead the end-to-end process for achieving and maintaining SOC 2 compliance, including scoping, evidence collection, control implementation, and audit preparation using Vanta's platform.Vanta Platform Utilization: Leverage Vanta's AI and automation tools to streamline compliance workflows, monitor controls, and manage vendor risk assessments.Continuous Monitoring: Implement and oversee continuous monitoring processes to ensure ongoing adherence to SOC 2 requirements and other relevant frameworks (e.g., ISO *****, GDPR).Policy Development: Develop, update, and maintain security and compliance policies, procedures, and documentation within Vanta's centralized platform.Vendor Risk Management: Utilize Vanta's Vendor Risk Management (VRM) solution to assess and monitor third-party vendors, ensuring compliance with security standards.Audit Support: Collaborate with external auditors to facilitate smooth and efficient SOC 2 audits, utilizing Vanta's tools to provide real-time evidence and reporting.Cross-Functional Collaboration: Work closely with engineering, IT, and product teams to integrate compliance requirements into SaaS product development and operations.Training and Awareness: Conduct training sessions for employees on SOC 2 compliance requirements and best practices for maintaining a secure SaaS environment.Reporting and Metrics: Use Vanta's reporting features to track compliance metrics, generate reports, and communicate the company's security posture to internal stakeholders and external clients.Stay Updated: Keep abreast of evolving compliance frameworks, security standards, and Vanta platform updates to ensure alignment with industry best practices.