Compliance Program Lead: SOC 2 & ISO 27001

Real Work From Anywhere Ltd.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Sourcegraph seeks a Compliance Manager to own governance, risk, and compliance across the organization, with a primary focus on SOC 2 and ISO 27001. You’ll drive audits, tailor controls, and ensure ISMS processes are maintained while collaborating with Security, IT, Legal, and Engineering.

You will personally own audit programs, collect evidence, manage remediation, and support customer inquiries. A hands-on mindset and strong communication are essential for success in this cross-functional role.

Qualifications

• 5+ years of experience in governance, risk, compliance, information security compliance, or a related role.
• Demonstrated end-to-end ownership of SOC 2 and ISO 27001 programs, ideally within a SaaS, tech startup, or fast-moving environment.
• Experience managing external audits and certification processes, including audit preparation and remediation.
• Strong understanding of ISMS governance, risk management, and compliance program operations.
• Familiarity with cloud-based environments and security/compliance for distributed/remote work environments.
• Excellent written and verbal communication skills and ability to translate requirements to both technical and non-technical audiences.

Responsibilities

• Own Sourcegraph's SOC 2 and ISO 27001 compliance programs end to end.
• Manage audit activities, including testing, evidence collection, stakeholder coordination, and remediation.
• Tailor controls to Sourcegraph’s environment and avoid overly prescriptive requirements.
• Maintain ISMS processes, policies, and risk register.
• Guide internal teams on compliance responsibilities and provide practical guidance.
• Support customer-facing compliance activities, including security questionnaires.

Skills

Governance

Risk management

Compliance

ISMS

SOC 2

ISO 27001

Audits

Automation

Cloud environments

Cross-functional collaboration

Project management

Education

Bachelor's degree in a relevant field

Tools

GRC platforms

Job description

Sourcegraph seeks a Compliance Manager to own governance, risk, and compliance across the organization, with a primary focus on SOC 2 and ISO 27001. You’ll drive audits, tailor controls, and ensure ISMS processes are maintained while collaborating with Security, IT, Legal, and Engineering.

You will personally own audit programs, collect evidence, manage remediation, and support customer inquiries. A hands-on mindset and strong communication are essential for success in this cross-functional role.