Chief IT & Compliance Officer

Footprint; New York (NY); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Equity package

Free meals

Wellness stipend

Unlimited PTO

Health, dental, vision insurance

Job summary

Footprint is building an agentic platform for compliant, end-to-end risk management. The role leads security, identity, device fleet, vendor reviews, and audit readiness across SOC 2, PCI DSS, GDPR, and ISO 27001 using Vanta and related tools.

You will own the program, drive improvements, and partner with Sales to provide audit-ready reports and trusted security posture for regulated clients in banking and fintech.

Qualifications

• Has owned at least one compliance program end to end, including audits and closing findings.
• Accountable for control state in a compliance platform (e.g., Vanta, Drata).
• Managed a workforce device fleet with modern MDM and endpoint security.
• Owned SSO and directory management including offboarding.

Responsibilities

• Own the four frameworks (SOC 2 Type 2, PCI DSS Level 1, GDPR, ISO 27001) and the system of record in Vanta.
• Lead identity and access policies, onboarding/offboarding, and access standards for internal tools.
• Oversee device fleet protection, coverage, tooling, and enforcement model.
• Design and own vendor security reviews, spend, and renewals for infrastructure.
• Manage security and cloud operations, testing, disaster recovery, and data lifecycle program.
• Provide a customer-facing security edge for audit reports and questionnaires.

Skills

Compliance program ownership

Security governance

Vendor management

End-to-end IT&Compliance

Audit readiness

Tools

Vanta

Drata

SSO

Job description

Footprint is building an agentic platform for compliant, end-to-end risk management. The role leads security, identity, device fleet, vendor reviews, and audit readiness across SOC 2, PCI DSS, GDPR, and ISO 27001 using Vanta and related tools.

You will own the program, drive improvements, and partner with Sales to provide audit-ready reports and trusted security posture for regulated clients in banking and fintech.