Compliance Engineering Lead - Automate & Certify Trust

Socket; United States; On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Equity program

Health benefits

Remote-first culture

Parental leave

Job summary

Socket seeks a Compliance Engineering Lead to own compliance as an engineered system. You will drive SOC 2 Type II, ISO 27001, and ISMS programs, building automated evidence pipelines from GCP, GitHub, identity providers, and ticketing systems.

You will report to the CISO, hire a teammate focused on security questionnaires, RFPs, and contract security reviews with Legal. This role blends security, engineering, and governance in a remote-first environment.

Qualifications

• Owned at least two full SOC 2 Type II cycles as the accountable person.
• Experience taking ISO 27001 certification and ISMS through surveillance audits.
• Automation of evidence collection from systems of record (GCP, GitHub, identity providers, MDM, ticketing).

Responsibilities

• Own SOC 2 Type II end to end, including auditor relationship and evidence pipeline.
• Lead ISO 27001 certification and ongoing ISMS maintenance.
• Develop automated evidence collection and monitoring to detect drift before audits.
• Turn risk management into working programs and maintain a risk register.
• Own the customer-facing assurance surface and build a trust portal and artifact library.
• Scope and guide AI assurance posture and decide which standards to pursue.

Skills

SOC 2 Type II

ISO 27001

Automation

Risk management

Communication

Tools

Drata/Vanta

GCP

GitHub

Identity provider

MDM

Ticketing systems

Job description

Socket seeks a Compliance Engineering Lead to own compliance as an engineered system. You will drive SOC 2 Type II, ISO 27001, and ISMS programs, building automated evidence pipelines from GCP, GitHub, identity providers, and ticketing systems.

You will report to the CISO, hire a teammate focused on security questionnaires, RFPs, and contract security reviews with Legal. This role blends security, engineering, and governance in a remote-first environment.