Compliance Manager - SOC 2, Privacy & SaaS Controls

Procare Solutions; Atlanta (GA); Hybrid; USD 139,000 - 151,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K Plan

Stock Purchase Program

Paid Time Off

Disability & Life Insurance

Job summary

Procare is seeking a Compliance Manager to own and mature our regulatory program across SOC 2, privacy, PCI, HIPAA, and related standards. You will lead a small team and partner with Engineering, IT, and Security to design controls, validate evidence, and prepare audits.

The role requires 4+ years in compliance/security/audit, familiarity with GDPR/CCPA, and experience in SaaS environments. Hybrid work in Denver or Atlanta with 3 days in-office weekly.

Qualifications

• 5+ years' experience in compliance, information security, or IT audit, including SOC 2 Type 2 audits.
• Familiarity with SOX ITGC, privacy (GDPR/CCPA), and PCI DSS.

Responsibilities

• Own the SOC 2 Type 2 audit lifecycle end-to-end (scoping, control design, evidence collection, auditor liaison, remediation tracking).
• Support ITGC testing, walkthroughs, and coordination with internal and external auditors.
• Assist privacy audits (GDPR/CCPA) including data handling documentation.
• Support PCI DSS assessments (scoping, control validation).
• Review DPAs with customers/vendors/subprocessors; track obligations.
• Assess vendor/third-party risk and data protection requirements.
• Collaborate with Engineering, IT, and Security to design, implement, and monitor controls.
• Maintain and evolve compliance policies, procedures, and training content.
• Serve as point of contact for external auditors and security questionnaires.
• Identify opportunities to automate evidence collection and monitoring.

Job description

Procare is seeking a Compliance Manager to own and mature our regulatory program across SOC 2, privacy, PCI, HIPAA, and related standards. You will lead a small team and partner with Engineering, IT, and Security to design controls, validate evidence, and prepare audits.

The role requires 4+ years in compliance/security/audit, familiarity with GDPR/CCPA, and experience in SaaS environments. Hybrid work in Denver or Atlanta with 3 days in-office weekly.