Back
Remote role at a known SaaS firm with mid-senior generalist compliance skills yields medium candidate competition.
Specialized SOC2, ISO, cloud audit and GRC tooling experience makes background fit highly industry-specific.
Explicit 6+ years, mandatory SOC2/ISO audit experience and GRC tooling make shortlisting highly strict.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Own end-to-end audit evidence collection and auditor engagement for ISO 27001, SOC 2, ISO 42001 certifications, managing operational liaison during all audit stages.
Use AI tools to accelerate compliance workflows including evidence gathering, control narrative drafting, and gap analysis with human validation.
Partner cross-functionally to ensure continuous audit readiness, control effectiveness monitoring, and embed compliance into operational processes.
6+ years of experience in GRC, information security, risk management, or IT audit, preferably in SaaS or cloud-native environment.
Strong knowledge of SOC 2, ISO 27001, NIST CSF 2.0, CIS Controls; working knowledge of ISO 42001 and NIST AI RMF.
Experience managing audit evidence collection and acting as primary audit liaison for external auditors across security/privacy domains.
Proficiency with GRC platforms (e.g., Drata, Vanta, AuditBoard) and familiarity with cloud environments (AWS, Azure, GCP) and related security tooling.
Experienced working in high-growth SaaS or cloud environments with mature compliance programs involving ISO 27001, SOC 2, and AI governance frameworks.
Comfortable integrating AI automation to optimize compliance workflows while ensuring accuracy and compliance with regulatory standards.
Able to operate cross-functionally with technical and legal teams to translate technical controls into actionable compliance processes and documentation.