Compliance Manager - SOC 2 & ISO 27001 Lead

Sourcegraph, Inc.; United States, Northern America, Americas; À distance; USD 103 000 - 138 000; Plein temps

Avantages offerts par ce poste

Equity

Benefits

Résumé du poste

Sourcegraph, Inc. is seeking a Compliance Manager to own governance, risk, and compliance with a primary focus on SOC 2 and ISO 27001. This is a highly cross‑functional role working with Security, Engineering, IT, Legal, and People teams.

You will personally manage audits, tailor controls, maintain ISMS, and guide teams to meet requirements efficiently while addressing customer questions and maintaining program quality.

Qualifications

• 5+ years of governance, risk, compliance, or information security experience.
• End‑to‑end ownership of SOC 2 and ISO 27001 programs in SaaS/tech environments.
• Experience managing external audits and certification processes.
• Strong understanding of risk management, ISMS governance, and program operations.
• Ability to tailor controls to the actual environment, not generic templates.
• Familiarity with cloud environments and distributed/remote work considerations.
• Strong project management and organizational skills.
• Excellent written and verbal communication.
• Hands‑on mindset to execute compliance work.
• Curiosity about AI, automation, and new tools for compliance.

Responsabilités

• Build strong relationships across Security, Engineering, IT, Legal, People, Sales, and other stakeholders.
• Own SOC 2 and ISO 27001 programs and drive audit activities.
• Tailor controls to Sourcegraph's environment and drive remediation.
• Maintain ISMS processes, risk register, and compliance docs.
• Guide internal teams on compliance requirements and practical practices.
• Support customer security questionnaires and compliance questions.

Connaissances

Governance

Risk management

Compliance

Information security

SOC 2

ISO 27001

Audits

Cloud security

Description du poste

Sourcegraph, Inc. is seeking a Compliance Manager to own governance, risk, and compliance with a primary focus on SOC 2 and ISO 27001. This is a highly cross‑functional role working with Security, Engineering, IT, Legal, and People teams.

You will personally manage audits, tailor controls, maintain ISMS, and guide teams to meet requirements efficiently while addressing customer questions and maintaining program quality.