Security & Compliance Operations Manager
Core
Own the end-to-end security and compliance program for an enterprise-focused documentation platform, managing audits, vendor relationships, and customer-facing trust requirements.
Role type
GRC Program Manager (Security & Compliance Operations)
Builds
Enterprise trust infrastructure (SOC 2, ISO 27001, ISO 42001, GDPR, Microsoft SSPA) for a docs platform serving 100M+ developers.
Domain
Cybersecurity, Compliance, Enterprise Software
Deliverable
Production compliance frameworks and audit readiness
Required skills
GRC program management, audit ownership, compliance platform administration (Drata/Vanta), vendor relationship management, security questionnaire handling, bug bounty coordination, policy management
Preferred skills
ISO 42001/AI governance exposure, GDPR operations (DSARs, RoPA), early-stage startup experience as sole compliance owner
Technologies
Drata, Vanta, Sensiba, A-LIGN, Rhymetec
Responsibilities
Run five compliance programs end-to-end including audit calendar and evidence collection; Administer Drata to maintain monitors and manage the trust center; Manage security/compliance vendor portfolio and vCISO engagement; Execute standing processes like security questionnaires and access reviews; Act as customer-facing compliance voice for enterprise requirements; Coordinate technical work with Engineering DRIs
Seniority
Mid-level, hands-on IC