Compliance Engineering Lead

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SOCKET

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1994

📡 Telecommunications

Telecommunications

SOCKET is a telecommunications company offering internet, phone, and television services to both residential and business customers. For residential customers, SOCKET provides straightforward service bundles with flat-rate pricing and local support, ensuring simplicity and ease with a single bill covering all services. For businesses, SOCKET offers a range of solutions from basic internet and phone services to advanced offerings like Hosted PBX and Dedicated Services, tailor-fit to meet different size and budget requirements. With a focus on transparent billing and no hidden fees, SOCKET distinguishes itself by providing reliable telecommunications solutions that cater to a diverse clientele.

📋 Description

• Own SOC 2 Type II end to end, including the observation window, auditor relationship, audit scope, controls, evidence pipeline, and customer-facing report • Lead Socket through ISO 27001 certification and maintain the ISMS • Build and maintain automated evidence collection from GCP, GitHub, identity provider, MDM, and ticketing systems • Create scheduled control monitoring that alerts on compliance drift • Eliminate recurring manual compliance tasks • Maintain a risk register used by leadership for decision-making • Run third-party risk management with tiering, reviews, and renewal cadence in partnership with an external security partner • Launch and maintain the customer-facing trust portal and assurance artifact library • Reduce enterprise customer questionnaire workload • Evaluate AI assurance frameworks and regulations, including ISO/IEC 42001, AIUC-1, the EU AI Act, and the NIST AI Risk Management Framework • Report directly to the CISO • Hire and lead a first teammate focused on security questionnaires, RFPs, and contract security review with Legal

🎯 Requirements

• Personally owned at least two full SOC 2 Type II cycles as the accountable person, including auditor relationship, scoping, evidence, and findings • Experience taking an organization through ISO 27001 certification or running an ISMS through surveillance audits • Comfortable building and maintaining automations against services and APIs • Experience operating with GCP, GitHub, identity providers, MDM, and ticketing systems • Hands-on experience with Drata, Vanta, or similar compliance platforms • Ability to prioritize real compliance risks over auditor formatting preferences • Strong writing suitable for auditors, enterprise security reviewers, engineers, and executives • Willingness to address problems across Security, Engineering, Legal, and Go-to-Market • Experience in a remote, fast-moving environment with shifting priorities • Nice to have: exposure to ISO/IEC 42001, NIST AI RMF, EU AI Act; experience at a security vendor; contract security review alongside Legal; in-house compliance automation experience

🏖️ Benefits

• Market competitive salary bands • Meaningful equity program • Comprehensive health benefits for you and your family (99% coverage) • Flexible time-off, holidays, and winter shutdown to rest & recharge • Paid parental leave • Remote-first work arrangement • Quarterly team off-sites