Compliance Expert

Job Title: Compliance SpecialistWe are seeking a highly skilled Compliance Specialist with expertise in SaaS environments and proficiency in using compliance management platforms.The ideal candidate will lead the client's SOC 2 compliance efforts, streamline evidence collection, ensure continuous monitoring, and support security and compliance programs to meet industry standards and customer expectations.This role requires strong coding fundamentals, system design capability, and the mindset of a builder who thrives in a dynamic environment.You will work in small, agile teams reporting directly to the CTO, collaborating closely with AI engineers, security leaders, and product managers.Together, you will build and deliver AI-native services delivered at startup speed.Our client is building an AI-centric operating system for utilities.It harnesses AI at the enterprise level to better orchestrate customer delight, facilitate power optimization, enhance grid health, and unlock flexibility at scale.Funded by a strategic industry partner, the client is poised to transform how utilities run and how customers experience energy.Key Responsibilities:SOC 2 Compliance Management: Lead the end-to-end process for achieving and maintaining SOC 2 compliance, including scoping, evidence collection, control implementation, and audit preparation.Vanta Platform Utilization: Leverage Vanta's AI and automation tools to streamline compliance workflows, monitor controls, and manage vendor risk assessments.Continuous Monitoring: Implement and oversee continuous monitoring processes to ensure ongoing adherence to SOC 2 requirements and other relevant frameworks.Policy Development: Develop, update, and maintain security and compliance policies, procedures, and documentation within Vantas' centralized platform.Vendor Risk Management: Utilize Vanta's Vendor Risk Management (VRM) solution to assess and monitor third-party vendors, ensuring compliance with security standards.Audit Support: Collaborate with external auditors to facilitate smooth and efficient SOC 2 audits, utilizing Vanta's tools to provide real-time evidence and reporting.Cross-Functional Collaboration: Work closely with engineering, IT, and product teams to integrate compliance requirements into SaaS product development and operations.Training and Awareness: Conduct training sessions for employees on SOC 2 compliance requirements and best practices for maintaining a secure SaaS environment.Reporting and Metrics: Use Vanta's reporting features to track compliance metrics, generate reports, and communicate the company's security posture to internal stakeholders and external clients.Required Skills and Qualifications:Excellent English communication skills.3+ years of experience in compliance, information security, or risk management, with a focus on SOC 2 compliance in a SaaS environment.Hands-on experience with Vanta or similar compliance automation platforms.Proven track record of successfully managing SOC 2 audits and implementing controls.Strong understanding of SaaS architecture, cloud security, and data privacy principles.Familiarity with compliance frameworks, such as SOC 2, ISO *****, HIPAA, GDPR, or NIST CSF.Proficiency in using compliance automation platforms for evidence collection, continuous monitoring, and vendor risk management.Benefits: Our team offers a unique opportunity to work in a fast-paced, dynamic environment, collaborate with experienced professionals, and contribute to the growth of our client's innovative solutions.What We Offer: We provide a competitive compensation package, opportunities for professional growth and development, and a supportive work environment that fosters creativity and innovation.About Us: We are a leading provider of outsourced development resources to North American companies.Our mission is to offer high-quality development talent who enjoy taking on challenging work, want to grow their skills and experiences building software, and excel in a fast-paced, dynamic team environment.