Security & Compliance Manager
Core
End-to-end ownership of security and compliance for product, cloud, and company operations, serving customers, auditors, and internal teams.
Role type
Senior hands-on Security & Compliance Manager
Builds
Security controls, compliance programs (SOC 2), secure development practices, and incident response capabilities
Domain
Cybersecurity, Cloud Security, GRC
Required skills
Cloud security (Azure), Kubernetes, IAM, secrets management, SOC 2/ISO 27001 audit leadership, threat modeling, penetration testing coordination, Python/shell scripting, security awareness training
Preferred skills
Offensive security, AppSec, attack surface management, CISSP/CCSP/OSCP certifications, AI tool usage for compliance automation
Technologies
Azure, Kubernetes, CI/CD pipelines, Python, Shell
Responsibilities
Answer security questionnaires and lead due diligence; run compliance programs and audits; maintain security roadmap and risk register; implement cloud and corporate security controls; conduct product security reviews and threat modeling; coordinate penetration tests and vulnerability assessments; lead incident response and tabletop exercises; assess vendor and AI tool risks
Seniority
Senior, hands-on IC
