Security Compliance Specialist

Job Opportunity:We are seeking an expert in SOC 2 compliance to lead our client's compliance efforts, streamline evidence collection, and ensure continuous monitoring.This role requires strong coding fundamentals, system design capability, and a builder mindset for a fast-paced environment.The ideal candidate will work closely with engineers, security leaders, and product managers to build AI-native services.Responsibilities:Lead end-to-end SOC 2 compliance, including scoping, evidence collection, control implementation, and audit preparation.Leverage automation tools to streamline compliance workflows, monitor controls, and manage vendor risk assessments.Implement and oversee continuous monitoring processes to ensure ongoing adherence to SOC 2 requirements.Develop, update, and maintain security and compliance policies, procedures, and documentation.Utilize Vendor Risk Management (VRM) solution to assess and monitor third-party vendors, ensuring compliance with security standards.Collaborate with auditors to facilitate smooth audits, utilizing real-time evidence and reporting.Work closely with engineering, IT, and product teams to integrate compliance requirements into SaaS product development and operations.Conduct training sessions on SOC 2 compliance requirements and best practices for maintaining a secure SaaS environment.Use reporting features to track compliance metrics and communicate the company's security posture.Stay updated on evolving compliance frameworks and industry best practices.Requirements:Excellent English communication skills.3+ years of experience in compliance, information security, or risk management, with a focus on SOC 2 compliance in a SaaS environment.Hands-on experience with compliance automation platforms.Proven track record of successfully managing SOC 2 audits and implementing controls.Strong understanding of SaaS architecture, cloud security, and data privacy principles.Familiarity with compliance frameworks such as SOC 2, ISO *****, HIPAA, GDPR, or NIST CSF.Proficiency in using compliance automation platforms for evidence collection, continuous monitoring, and vendor risk management.Excellent project management and organizational skills to manage complex compliance initiatives.Strong communication skills to liaise with technical teams, auditors, and leadership.Detail-oriented with a proactive approach to problem-solving and process improvement.Desired Experience:Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field (or equivalent experience).Relevant certifications (e.g., CISA, CISSP, CRISC, or SOC 2-specific training).Familiarity with AI Agent and other advanced features for GRC automation.Experience working with startups, mid-market, or enterprise organizations in a SaaS environment.About the Role:This is a remote opportunity that allows you to work from anywhere while contributing to a dynamic team that prioritizes innovation and growth.),