Contract Senior Security & Compliance Lead (SOC 2/ISO)

Talex, Inc.; United States; A distancia; USD 110.000 - 248.000; A tiempo parcial

Descripción de la vacante

DeepReach is building next-generation robotics data infrastructure, emphasizing security/compliance as it handles sensitive data and enters enterprise deployments. The Senior Security & Compliance Manager (Contract) will drive SOC 2 and ISO 27001 readiness, work closely with the CTO and engineering, and ensure audit-friendly evidence, policies, and controls.

The role is hands-on in a cloud startup environment, leveraging Drata and coordinating with auditors.

Formación

• Experience leading SOC 2 and/or ISO 27001 readiness and audits.
• Security compliance, GRC, or security program operations in startups/high-growth tech.
• Experience with Drata; comparable tools like Vanta/Secureframe acceptable.

Responsabilidades

• Own day-to-day security compliance program execution for SOC 2 and ISO 27001 readiness and audits.
• Operate and maintain the compliance program in Drata.
• Collaborate with CTO and engineering to define, document, and improve security controls.
• Draft and maintain security/compliance policies, procedures, and narratives.
• Coordinate readiness efforts across access control, logging, asset inventory, vendor management, incident response, and change management.
• Identify control gaps and drive remediation to completion.
• Manage auditor relationships and maintain readiness timelines.

Conocimientos

SOC 2 readiness

ISO 27001 readiness

Audit coordination

GRC

Security program operations

Cloud security (AWS)

Herramientas

Drata

Vanta

Secureframe

Descripción del empleo

DeepReach is building next-generation robotics data infrastructure, emphasizing security/compliance as it handles sensitive data and enters enterprise deployments. The Senior Security & Compliance Manager (Contract) will drive SOC 2 and ISO 27001 readiness, work closely with the CTO and engineering, and ensure audit-friendly evidence, policies, and controls.

The role is hands-on in a cloud startup environment, leveraging Drata and coordinating with auditors.