Engineering Lead, Compliance Platforms

Socket; New York (NY); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Market competitive salary bands

Meaningful equity program

Comprehensive health benefits

Flexible time-off

Remote-first with quarterly off-sites

Job summary

Socket is seeking a Compliance Engineering Lead to own the compliance platform as an engineered system. You’ll write tests, build automated evidence pipelines, and manage audits end to end, reporting to the CISO and shaping Socket’s GRC strategy for enterprise customers.

You will own SOC 2 Type II and ISO 27001 programs, defining scope, collecting evidence, and driving continuous improvement. This remote‑first role blends engineering with governance in a fast‑moving security‑focused environment.

Qualifications

• Owned at least two full SOC 2 Type II cycles, including auditor relationship, scoping, evidence, and findings.
• ISO 27001 depth; experience taking an organization through certification or surveillance audits.
• Hands-on with automations against cloud services (GCP, GitHub) and related tooling.
• Experience with Drata, Vanta or similar platforms for compliance automation.
• Strong judgment to distinguish real risk from an auditor's formatting preferences.
• Experience in a remote, high-velocity environment with shifting priorities.

Responsibilities

• Own SOC 2 Type II end to end, including scope and evidence.
• Manage auditor relationships, evidence pipeline, and reporting.
• Lead ISO 27001 certification efforts and maintain ISMS.
• Define ISMS scope, perform gap assessments, and run internal audits.
• Automate evidence collection across systems to reduce manual work.
• Develop programs for risk and third-party vendor risk management.
• Own customer‑facing assurance surface and related artifacts.
• Launch and maintain a trust portal and library of enterprise artifacts.
• Evaluate and influence AI governance posture (ISO 42001, NIST RMF, EU AI Act).
• Contribute to strategy on what Socket should commit to in governance spaces.

Skills

SOC 2 Type II

ISO 27001

Automation

GRC Tools

Audits

Tools

Drata

Vanta

GCP

GitHub

Identity Provider

Job description

Socket is seeking a Compliance Engineering Lead to own the compliance platform as an engineered system. You’ll write tests, build automated evidence pipelines, and manage audits end to end, reporting to the CISO and shaping Socket’s GRC strategy for enterprise customers.

You will own SOC 2 Type II and ISO 27001 programs, defining scope, collecting evidence, and driving continuous improvement. This remote‑first role blends engineering with governance in a fast‑moving security‑focused environment.