Job Description
Title: Security Compliance & Trust Certifications Lead
Duration: Long term
Location :Remote ,USA(Candidate from California or PST times highly preferred)
(ONLY W2)
Job Description:
Key Responsibilities
- Certification Program Ownership
- Lead end-to-end delivery of SOC 2 Type II and ISO/IEC 27001:2022 certifications
- Define certification scope, system boundaries, and control applicability
- Translate business operations and technical environments into audit-ready control narratives
- Control Design & Implementation
- Map existing security and operational controls to SOC 2 and ISO 27001 requirements
- Identify control gaps and implement pragmatic remediation plans
- Ensure controls align with modern SaaS and cloud-native environments
- Evidence Management & Audit Readiness
- Design scalable evidence collection workflows and continuous monitoring processes
- Implement lightweight tooling or automation for ongoing evidence capture
- Prepare audit artifacts, walkthrough materials, and management responses
- Serve as the primary liaison with external auditors and assessors
- ISMS & Governance Build-Out
- Establish and operationalize a scalable Information Security Management System (ISMS)
- Define and implement:
- Risk assessment and risk quantification methodology
- Policy and standards framework
- Management review cadence
- Required Qualifications
- 7+ years of experience in security compliance, GRC, audit readiness, or related fields
- Proven hands-on delivery of SOC 2 and ISO 27001 certification programs
- Experience in fast-growing SaaS or consumer technology companies
- Strong ability to translate technical environments into audit-grade documentation and narratives
- Familiarity with GRC platforms such as VISO Trust, Vanta, Drata, or similar
- Solid understanding of cloud security controls and modern SaaS architectures
- Experience with risk assessment and risk quantification methodologies
- Preferred Qualifications
- Background in Big 4 or top-tier advisory firms (PwC, Deloitte, EY, KPMG)
- Experience with AWS, GCP, or Azure cloud environments
- Proven ability to partner directly with CISOs and executive leadership teams
Apply Now
Apply Now