Part-Time Compliance Lead - SOC 2, Automation & AI

Soda; Brussel Hoofdstad; Remote; GBP 83,000 - 165,000; Part time

Benefits offered by this job

Autonomy

Direct access to decision-makers

AI-forward tooling

Contractor rate

Job summary

Soda is seeking a part-time Compliance Lead to own and advance our SOC 2 program and related security processes. You will push automation, streamline evidence gathering, and partner with engineers to keep compliance audit-ready without slowing product velocity.

Join a fast-moving, AI-forward SaaS company with a small, global team. You’ll work remotely from an EU-friendly time zone, collaborate with our external auditor, and help shape security responses for enterprise customers.

Qualifications

• 3+ years in security compliance / GRC, ideally at a B2B SaaS company.
• Hands-on with SOC 2 Type II cycle, including working with an external auditor.
• Experience with compliance automation platforms (Drata, Vanta, Secureframe).
• Comfortable designing automations, including with AI.

Responsibilities

• Own the annual SOC 2 Type II and SOC 3 cycle with the external auditor: planning, access, samples, report portions, and findings.
• Maintain audit-ready controls year-round: track lapses, follow up on failures, close gaps.
• Manage onboarding/offboarding compliance steps and annual security training tasks.
• Assist Sales with enterprise security reviews and responses to questionnaires.

Skills

SOC 2

Security compliance

GRC

Automation

AI-assisted workflows

Policy writing

English communication

Freelancer collaboration

Tools

Drata

Vanta

Secureframe

AWS

Okta

GitHub

Job description

Soda is seeking a part-time Compliance Lead to own and advance our SOC 2 program and related security processes. You will push automation, streamline evidence gathering, and partner with engineers to keep compliance audit-ready without slowing product velocity.

Join a fast-moving, AI-forward SaaS company with a small, global team. You’ll work remotely from an EU-friendly time zone, collaborate with our external auditor, and help shape security responses for enterprise customers.