Compliance Manager

Procare Solutions; Denver (CO); Hybrid; USD 139,000 - 151,000; Full time

Benefits offered by this job

Medical, dental, & vision plans

HSA with employer contributions

Vacation, holidays, sick days, and PTO

401K with employer match

Job summary

Procare Solutions is seeking a Compliance Manager to own and mature its compliance program as we scale, leading SOC 2 Type 2 audits across multiple products and supporting SOX, privacy, PCI, HIPAA, and related frameworks. You will build repeatable processes, partner with Engineering and IT, and translate regulatory requirements into auditable controls for business units.

You’ll lead a small team of analysts and contractors, with opportunities for people leadership while staying close to

Qualifications

• 4+ years in compliance, information security, or IT audit with direct SOC 2 Type 2 audit experience.
• Working knowledge of SOX ITGC concepts, privacy frameworks (GDPR/CCPA), and PCI DSS requirements.
• Experience reviewing contract terms.
• Familiarity with control frameworks (HIPAA, AICPA Trust Services Criteria, NIST CSF, ISO 27001).
• Experience mentoring junior team members or contractors.
• Strong written and verbal communication skills; able to explain controls to engineers and auditors.
• Experience in fast-paced SaaS environments with evolving systems.
• Bachelor's degree in a related field, or equivalent practical experience.
• Experience with GRC platforms (Vanta, Drata, OneTrust, ServiceNow GRC).
• Experience with cloud infrastructure (AWS, GCP, Azure).

Responsibilities

• SOC 2 Type 2: own end-to-end audit lifecycle from scoping to remediation tracking.
• SOX: support ITGC testing, walkthroughs, and coordination with auditors.
• Privacy audits: support GDPR/CCPA/CPRA audits and data handling documentation.
• PCI: assist with PCI DSS assessments including scoping and control validation.
• DPAs: review and track DPAs with customers, vendors, and subprocessors.
• Vendor risk: assess subprocessors and vendors for compliance posture.
• Controls oversight: design, implement, monitor controls with engineering and IT.
• Policy & Process: maintain and evolve compliance policies and training.
• Audit readiness: be primary contact for auditors and security questionnaires.
• Continuous improvement: automate evidence collection and improve monitoring with GRC tools.

Skills

SOC 2 audits

SOX ITGC

GDPR

CCPA/CPRA

HIPAA

NIST CSF

ISO 27001

Contract review

Mentoring

Communication

CISA

CISM

CIPP/E

CIPP/US

Vanta

Drata

OneTrust

ServiceNow GRC

AWS

GCP

Azure

Education

Bachelor's degree

Tools

Vanta

Drata

OneTrust

ServiceNow GRC

AWS

GCP

Azure

Job description

About Procare

For over 30 years, Procare Solutions has been dedicated to empowering early childhood educators by providing products and services that enable them to focus on the care, safety and education of children. We recognize the responsibility that comes with nurturing and educating children, which is why our child care management solutions are designed to automate business processes, help ensure safety and compliance, communicate with families and provide educational resources and training to help teachers and children thrive.

Over 40,000 satisfied customers have chosen Procare Solutions as their trusted partner in providing exceptional care for young minds.

A Little About the Role

We're looking for a Compliance Manager to own and mature our compliance program as we scale. You'll be the primary driver of our SOC 2 Type 2 audit program for 5 products, and will provide critical support across SOX, privacy, PCI, HIPAA, and additional regulatory and professional framework compliance efforts. This is a hands-on role for someone who enjoys building repeatable processes, working cross-functionally with engineering and IT teams, and translating regulatory and contractual requirements into practical, auditable controls for business units.

You’ll lead a small team: analysts, contractors, stakeholders - making this a great opportunity for someone ready to take on people leadership while staying close to the technical and operational details of compliance work.

What you’ll do:

• SOC 2 Type 2: Own the end-to-end audit lifecycle - scoping, control design, evidence collection, auditor liaison, remediation tracking, and continuous monitoring between audit cycles.
• SOX Support: Assist with IT general controls (ITGCs) testing, walkthroughs, and coordinationwith internal audit and external auditors to support financial reporting compliance.
• Privacy Audits: Support privacy compliance efforts (e.g., GDPR, CCPA/CPRA) including auditprep, control validation, and documentation of data handling practices.
• PCI Compliance: Support PCI DSS assessments, including scoping, control validation, andcoordination with payment processing and engineering teams.
• Data Processing Addendums (DPAs): Review, negotiate and track DPAs with customers,vendors, and subprocessors, ensuring alignment with our data protection commitments and privacy obligations.
• Vendor & Third-Party Risk: Assess subprocessors and vendors for compliance posture andcontractual data protection requirements.
• Controls Oversight: Partner with Engineering, IT, and Security teams to design, implement, andmonitor controls; maintain a strong evidence trail and control library.
• Policy & Process: Maintain and evolve compliance policies, procedures, and control narrativesto reflect the current environment and audit requirements, including ensuring NEO and annual training is released and accurate.
• Audit Readiness: Serve as a key point of contact for external auditors, customer security questionnaires, and due diligence requests.
• Continuous Improvement: Identify opportunities to automate evidence collection and streamlinecontrol monitoring using GRC tooling.

Our ideal candidate will have:

• 4+ years' of experience in compliance, information security, or IT audit, with direct experience running or supporting SOC 2 Type 2 audits.
• Working knowledge of SOX ITGC concepts, privacy frameworks (GDPR/CCPA), and PCI DSSrequirements — you don't need to be a deep expert in all four, but you should be comfortable supporting each.
• Experience reviewing contract terms.
• Familiarity with common control frameworks (e.g., HIPAA, AICPA Trust Services Criteria, NISTCSF, ISO 27001).
• Prior experience managing or mentoring junior team members or contractors.
• Strong written and verbal communication skills — you can explain control requirements toengineers and translate technical detail for auditors and leadership.
• Comfortable working in a fast-paced SaaS environment with evolving systems and processes.
• Bachelor's degree in a related field, or equivalent practical experience.
• Experience working with GRC platforms (e.g., Vanta, Drata, OneTrust, ServiceNow GRC) is astrong plus.
• Relevant certifications: CISA, CISM, CIPP/E, CIPP/US, or similar.
• Experience supporting multiple concurrent audit cycles in a SaaS or cloud environment.
• Experience with cloud infrastructure (AWS, GCP, or Azure) and understanding of how technicalcontrols map to compliance requirements.

Physical Requirements:

• This position works most of the time in a fixed office location and may involve sitting and/or standing for prolonged periods
• Frequently required to communicate verbally and in writing (mostly email) with customers, prospects, and other employees
• Use of computer, telephone, and other office equipment for the greater part of the workday
• Occasional travel may be required for this position

Why Procare?

• Excellent comprehensive benefits packages including: medical, dental, & vision plans
• HSA option with employer contributions
• Vacation time, holidays, sick days, volunteer & personal days
• 401K Plan with employer match and immediate vesting
• Employee Stock Purchase Plan
• Employee Discount Program
• Medical, Dependent Care, and Transportation FSA Plans
• Company paid Short and Long-Term disability and Life Insurance
• RTD EcoPass for all Denver employees
• Tuition Reimbursement and continued Professional Development
• Fast paced, high energy workplace environment in prime downtown location
• Regular company provided meals

Salary

$139,400 - $150,700/year DOE

Location

This position can be based in our Denver, CO or Atlanta, GA offices. Procare operates in a hybrid working model based on business needs. Candidates must be willing and able to work in office a minimum of 3 days per week.