Compliance Program Lead: SOC 2, HIPAA & ISO 27001

Relaypro; Raleigh (NC); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) with company match

Generous PTO

Parental leave

Job summary

Relay is seeking a Compliance Manager to own our end-to-end compliance program, reporting to IT & Security leadership and partnering with cross-functional teams. You will manage the active certification portfolio (SOC 2 Type II, HIPAA, ISO 27001:2022, PCI DSS) and serve as the Drata subject matter expert.

This ownership role requires driving the certification calendar, control library, policy lifecycle, and vendor risk, while collaborating with department leaders to meet deadlines with

Qualifications

• A degree in Computer Science, IT, or a security-related discipline, or equivalent certifications.
• 5+ years in information security compliance, GRC, or audit with 2+ years managing certification programs.
• Hands-on SOC 2 Type II audits end-to-end, including auditor management and remediation.
• Knowledge of HIPAA security requirements, ISO 27001:2022, and PCI DSS.
• Expertise with Drata or similar GRC platforms and auditor collaboration workflows.
• Strong interpersonal and organizational skills; ability to drive cross‑functional execution.

Responsibilities

• Own Relay's compliance certification portfolio end-to-end, including schedule and on-time completion.
• Serve as Drata subject matter expert; map controls and manage evidence workflows.
• Coordinate external auditors within Drata; manage fieldwork and remediation.
• Run internal audit program; test controls and track findings to remediation.
• Own policy management lifecycle and third-party vendor risk program.
• Partner with department leaders to assign compliance responsibilities and timelines.
• Support customer trust activities and security questionnaires.
• Report posture, audit status, and metrics to security leadership.

Skills

Information Security

GRC

Audit management

Policy management

Vendor risk management

Communication skills

Project management

Education

Bachelor’s degree in Computer Science or security-related discipline

CRISC, CGRC, GRCP, CISM, or CISA certifications

Tools

Drata

Vanta

Secureframe

Hyperproof

Job description

Relay is seeking a Compliance Manager to own our end-to-end compliance program, reporting to IT & Security leadership and partnering with cross-functional teams. You will manage the active certification portfolio (SOC 2 Type II, HIPAA, ISO 27001:2022, PCI DSS) and serve as the Drata subject matter expert.

This ownership role requires driving the certification calendar, control library, policy lifecycle, and vendor risk, while collaborating with department leaders to meet deadlines with