Chief Compliance Officer

Compliance SpecialistWe are seeking a remote Compliance Specialist with expertise in SaaS environments and proficiency in using compliance management platforms.The ideal candidate will lead the client's SOC 2 compliance efforts, streamline evidence collection, ensure continuous monitoring, and support security and compliance programs to meet industry standards.This role requires strong coding fundamentals, system design capability, and the mindset of a builder who thrives in a startup environment.You will work in small agile teams reporting directly to the CTO, collaborating closely with AI engineers, security leaders, and product managers.The client is building an AI-centric operating system for utilities.It harnesses AI at the enterprise level to better orchestrate customer delight, facilitate power optimization, enhance grid health, and unlock flexibility at scale.Lead the end-to-end process for achieving and maintaining SOC 2 compliance, including scoping, evidence collection, control implementation, and audit preparation.Leverage Vanta's AI and automation tools to streamline compliance workflows, monitor controls, and manage vendor risk assessments.Implement and oversee continuous monitoring processes to ensure ongoing adherence to SOC 2 requirements and other relevant frameworks.Develop, update, and maintain security and compliance policies, procedures, and documentation within Vantas' centralized platform.Utilize Vanta's Vendor Risk Management (VRM) solution to assess and monitor third-party vendors, ensuring compliance with security standards.Collaborate with external auditors to facilitate smooth and efficient SOC 2 audits, utilizing Vanta's tools to provide real-time evidence and reporting.The ideal candidate will have:3+ years of experience in compliance, information security, or risk management, with a focus on SOC 2 compliance in a SaaS environment.A proven track record of successfully managing SOC 2 audits and implementing controls.A strong understanding of SaaS architecture, cloud security, and data privacy principles.