Compliance Manager

Relay; Raleigh (NC); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

100% Paid Insurance: Health, Dental, V

Paid Time Off

401(k) Matching

Parental Leave

Wellness Perks and onsite fitness

Job summary

Relay, the Intelligent System of Action for the physical economy, is hiring a Compliance Manager to own our end-to-end certification program (SOC 2 Type II, HIPAA, ISO 27001:2022, PCI DSS) and to serve as the Drata expert, central to our governance program. You’ll manage auditors, evidence, controls, and workflows to keep certifications on schedule.

This ownership role requires collaborating with leaders across the company to drive policy lifecycle, control health, and vendor risk while

Qualifications

• A degree in Computer Science, IT, or a security-related discipline; equivalent compliance certifications (CRISC, CGRC, GRCP, CISM, or CISA) will be considered in place of a formal degree.
• 5+ years of experience in information security compliance, GRC, or audit roles, with at least 2 years directly managing certification programs.
• Hands-on experience running SOC 2 Type II audits end-to-end, including auditor management, evidence collection, and remediation.
• Working knowledge of HIPAA security requirements, ISO 27001:2022 (ISMS operation and surveillance/recertification audits), and PCI DSS.
• Expert-level proficiency with Drata or a comparable GRC/compliance automation platform (Vanta, Secureframe, Hyperproof), including control mapping, monitoring, and auditor collaboration workflows.
• Demonstrated experience managing external audit firms through complete audit cycles.
• Experience building and running internal audit and control testing programs.
• Experience owning policy management and third-party vendor risk programs.
• Exceptional interpersonal and communication skills: translate framework requirements into plain language for any department leader, drive accountability without friction.
• Strong organizational and project management skills—manage multiple concurrent audit timelines without missing deadlines.

Responsibilities

• Own Relay's compliance certification portfolio — SOC 2 Type II + HIPAA, ISO 27001:2022, and PCI DSS — including the master schedule, audit readiness, and on-time completion of engagements.
• Serve as Relay's Drata SME: administer the platform, maintain mapping and monitoring, manage evidence workflows, and drive adoption across control owners.
• Manage external auditors directly from within Drata — coordinate audit windows, fieldwork, evidence requests, findings, and remediation through to report issuance.
• Run the internal audit program: plan and execute control testing, document results, track findings and remediation, and prepare the organization for external audits.
• Own control management across all frameworks — maintain the unified library, assign owners, monitor health, and remediate gaps.
• Own the policy management lifecycle — draft, review, update, route for approval, publish, and track attestations.
• Own third-party vendor risk management: security and compliance reviews for new vendors, reassessments, documentation, and risk tracking.
• Partner with department leaders to assign responsibilities, communicate requirements clearly, and hold owners to deadlines with firmness.
• Support customer trust activities, including security questionnaires and customer audit requests, and maintain trust center documentation.
• Report posture, audit status, risks, and metrics to security leadership and steering committees.

Skills

Compliance management

Auditing

Project management

Communication

Stakeholder collaboration

Education

Bachelor's degree in Computer Science / IT / security

CRISC CGRC GRCP CISM CISA or equivalent

Tools

Drata

Vanta

Secureframe

Hyperproof

Job description

Relay is the Intelligent System of Action for the physical economy. While the digital revolution has often left the deskless workforce behind, we are closing that gap by transforming analog frontline operations into a data-rich, AI-powered ecosystem. We aren't just selling radios, we’re building the digital foundation for the 80% of the global workforce that doesn't work at a desk.

Why Join Relay?

• A Proven Winner: Join a hyper-growth company trusted by over 10% of the Fortune 500, continuing to move upmarket with massive impact.
• High Value, High Impact: With 47% of our revenue from $100K+ ARR customers and 135% Net Revenue Retention (NRR), you'll be joining a company rooted in value creation.
• Market-Leading Innovation: The Relay platform captures 1 billion new data points weekly and features award-winning AI tools like TeamTranslate™, with 500% YoY growth.
• World-Class Leadership: Our stellar leadership team is built to help us scale toward our next major milestones.
• The Relay Culture: We’re dedicated to helping you do the best work of your life (BWIML), investing in your growth through L.I.T., living our CHASE values, and learning from incredibly talented, supportive teammates who make the work (and the wins) better every day.

Now, here’s what we’re building, and where you come in.

About the Role

Relay is hiring a Compliance Manager to own our compliance program end-to-end. Reporting to the Sr. Manager of IT & Security and working closely with the SVP of IT & Security, you will run our active certification portfolio — SOC 2 Type II + HIPAA, ISO 27001:2022, and PCI DSS — and serve as our Drata expert, the GRC platform at the center of everything we do. You'll manage our external auditors directly from within Drata, keeping evidence, controls, and audit workflows moving so certifications land on schedule, every time.

This is an ownership role, not a coordination role. The certification calendar, internal audit program, control library, policy lifecycle, and third-party vendor risk program will all be yours. And because compliance at Relay is a company‑wide effort, your success depends on how well you work with department leaders across the entire organization — earning their trust, making their obligations clear and achievable, and holding the line on deadlines and requirements with professionalism and tact. If you can make compliance feel like a shared win rather than a burden, this role is built for you.

About the Team

You’ll join a small, high-leverage IT & Security team responsible for protecting a fast‑growing, cloud‑first company. We manage a broad technology stack — from identity and device management to SaaS administration and enterprise automation — and we operate as true partners to the business, not just a support function. We move fast, build thoughtfully, and take pride in running a tight, well‑integrated environment. We deliberately run a lean internal team amplified by strategic partners and AI‑driven tooling, so every member owns real scope, works directly with senior leadership, and sees the impact of their work across the entire organization.

Responsibilities

• Own Relay's compliance certification portfolio — SOC 2 Type II + HIPAA, ISO 27001:2022, and PCI DSS — including the master certification schedule, audit readiness, and on‑time completion of every engagement.
• Serve as Relay's Drata subject matter expert: administer the platform, maintain control mapping and continuous monitoring, manage evidence collection workflows, and drive adoption across control owners.
• Manage the relationship with our external auditors directly from within Drata — coordinate audit windows, fieldwork, evidence requests, findings, and remediation through to report issuance.
• Run the internal audit program: plan and execute control testing, document results, track findings to remediation, and prepare the organization ahead of every external audit.
• Own control management across all frameworks — maintain the unified control library, assign and support control owners, monitor control health, and remediate gaps and drift.
• Own the policy management lifecycle — draft, review, update, route for approval, publish, and track attestation of security and compliance policies on their required cadence.
• Own third‑party vendor risk management: security and compliance reviews for new vendors, periodic reassessments, vendor documentation, and risk tracking through to acceptance or remediation.
• Partner with department leaders across the company to assign compliance responsibilities, communicate requirements in plain language, and hold owners accountable to deadlines with firmness and tact.
• Support customer trust activities, including security questionnaires, customer audit requests, and maintenance of compliance documentation and the trust center.
• Report compliance posture, audit status, risks, and program metrics to security leadership and the Security Steering Committee on a regular cadence.

Required Qualifications

• A degree in Computer Science, IT, or a security‑related discipline; equivalent compliance certifications (CRISC, CGRC, GRCP, CISM, or CISA) will be considered in place of a formal degree.
• 5+ years of experience in information security compliance, GRC, or audit roles, with at least 2 years directly managing certification programs.
• Hands‑on experience running SOC 2 Type II audits end‑to‑end, including auditor management, evidence collection, and remediation.
• Working knowledge of HIPAA security requirements, ISO 27001:2022 (including ISMS operation and surveillance/recertification audits), and PCI DSS.
• Expert‑level proficiency with Drata or a comparable GRC/compliance automation platform (Vanta, Secureframe, Hyperproof), including control mapping, monitoring, and auditor collaboration workflows.
• Demonstrated experience managing external audit firms through complete audit cycles.
• Experience building and running internal audit and control testing programs.
• Experience owning policy management and third‑party vendor risk programs.
• Exceptional interpersonal and communication skills: you can translate framework requirements into plain language for any department leader, drive accountability without creating friction, and set a tone that makes compliance a partnership.
• Strong organizational and project management skills — you can run multiple concurrent audit timelines without letting anything slip.

Preferred Qualifications

• Relevant certifications such as CISA, CISM, CRISC, ISO 27001 Lead Implementer/Lead Auditor, or CIPP.
• Experience adding new frameworks to an existing program (e.g., HIPAA, NIST, or FedRamp onto an ISO 27001 foundation).
• Experience in a fast‑paced, cloud‑first SaaS environment serving enterprise customers.
• Familiarity with security tooling that feeds compliance evidence (endpoint protection, identity management, awareness training platforms).
• Experience presenting to management, leadership and steering committees.

What success and impact looks like in this role:

• Every certification in the portfolio — SOC 2 Type II + HIPAA, ISO 27001:2022, and PCI DSS — is completed on schedule with no lapses and minimal findings.
• Drata is fully operationalized: controls mapped across frameworks, continuous monitoring healthy, evidence automated wherever possible, and Auditors working seamlessly within the platform.
• The internal audit program surfaces and closes gaps before external auditors find them.
• Policies are current, approved, and attested on schedule; the vendor risk program has full coverage of Relay's third parties with no aging reviews.
• Department leaders view compliance as a well‑run partnership — requirements are clear, deadlines are met, and escalations are rare because the relationships are strong.

Equal Opportunity Employer

Relay is proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all team members. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by applicable law.

Why Join Relay?

About Relay | Culture, Benefits & Perks

Our culture hinges on Relayers getting LIT up in an environment that fosters Learning, Impact, and Teamwork, where we CHASE the best work of our lives. We call this BWIML (Best Work In My Life).

At Relay, we offer:

• 100% Paid Insurance: Health, Dental, Vision, Long/Short Term Disability, and Life Insurance for you and your dependents
• Generous Paid Time Off
• 401(k) Savings Plan + Company Match
• Baby Cash Reward + Paid Parental Leave
• Wellness Perks: If you’re joining our Raleigh-based HQ, you’ll have access to a world‑class onsite fitness center with instructor‑led classes, plus tennis, basketball, pickleball, and cycling
• Team Events & Culture: From company celebrations to team outings, we work hard and have fun doing it.
• Latest tech, standing desks, and all the tools and software you need to thrive

The future of frontline work is being built here. Come build it with us. We can’t wait to hear from you.

We use AI tools to transcribe and summarize interviews for internal hiring purposes. Transcripts are accessible only to authorized hiring personnel and retained consistent with our data retention policies. Candidates who prefer not to have AI notetaking used may request to opt out without impact to your candidacy. For more information, please see our Candidate and Employee Privacy Notice linked here.