Compliance Program Lead: SOC 2, ISO 27001, HIPAA

Relay; Raleigh (NC); Presencial; USD 120.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Dental insurance

Vision insurance

Paid time off

401(k) match

Parental leave

Descripción de la vacante

Relay is seeking a Compliance Manager to own our certification program end-to-end, including SOC 2 Type II, HIPAA, ISO 27001:2022, and PCI DSS, with Drata at the center of everything we do. You will manage external auditors, maintain evidence, and run control workflows in a fast-growing, cloud-first environment.

You will partner with department leaders to assign compliance responsibilities, drive deadlines, and ensure attestations. If you’re a proactive, detail-focused leader, this is your role.

Formación

• A degree in Computer Science, IT, or a security-related discipline; equivalent compliance certifications will be considered.
• 5+ years of experience in information security compliance, GRC, or audit roles, with at least 2 years directly managing certification programs.
• Hands-on experience running SOC 2 Type II audits end-to-end, including auditor management, evidence collection, and remediation.
• Working knowledge of HIPAA security requirements, ISO 27001:2022, and PCI DSS.
• Expert-level proficiency with Drata or a comparable GRC/compliance automation platform (Vanta, Secureframe, Hyperproof), including control mapping, monitoring, and auditor collaboration workflows.
• Demonstrated experience managing external audit firms through complete audit cycles.
• Experience building and running internal audit and control testing programs.
• Experience owning policy management and third-party vendor risk programs.
• Exceptional interpersonal and communication skills: you can translate framework requirements into plain language for any department leader, drive accountability without friction, and set a tone of partnership.
• Strong organizational and project management skills — you can run multiple concurrent audit timelines without letting anything slip.

Responsabilidades

• Own Relay’s compliance certification portfolio — SOC 2 Type II + HIPAA, ISO 27001:2022, and PCI DSS — including the master certification schedule, audit readiness, and on-time completion of every engagement.
• Serve as Relay’s Drata subject matter expert: administer the platform, maintain control mapping and continuous monitoring, manage evidence collection workflows, and drive adoption across control owners.
• Manage the relationship with our external auditors directly from within Drata — coordinate audit windows, fieldwork, evidence requests, findings, and remediation through to report issuance.
• Run the internal audit program: plan and execute control testing, document results, track findings to remediation, and prepare the organization ahead of every external audit.
• Own control management across all frameworks — maintain the unified control library, assign and support control owners, monitor control health, and remediate gaps and drift.
• Own the policy management lifecycle — draft, review, update, route for approval, publish, and track attestation of security and compliance policies on their required cadence.
• Own third-party vendor risk management: security and compliance reviews for new vendors, periodic reassessments, vendor documentation, and risk tracking through to acceptance or remediation.
• Partner with department leaders across the company to assign compliance responsibilities, communicate requirements in plain language, and hold owners accountable to deadlines with firmness and tact.
• Support customer trust activities, including security questionnaires, customer audit requests, and maintenance of compliance documentation and the trust center.
• Report compliance posture, audit status, risks, and program metrics to security leadership and the Security Steering Committee on a regular cadence.

Conocimientos

Interpersonal communication

Project management

Auditing experience

Educación

Degree in Computer Science / IT or security

Herramientas

Drata

Vanta

Secureframe

Hyperproof

Descripción del empleo

Relay is seeking a Compliance Manager to own our certification program end-to-end, including SOC 2 Type II, HIPAA, ISO 27001:2022, and PCI DSS, with Drata at the center of everything we do. You will manage external auditors, maintain evidence, and run control workflows in a fast-growing, cloud-first environment.

You will partner with department leaders to assign compliance responsibilities, drive deadlines, and ensure attestations. If you’re a proactive, detail-focused leader, this is your role.