Engineering Lead, Compliance & Security Automation

Openkrill; United States; Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Market competitive salary bands

Meaningful equity program

Comprehensive health benefits for you

Flexible time-off

Paid parental leave

Remote-first with quarterly off-sites

Job summary

Socket is looking for a Compliance Engineering Lead who will own the compliance program end-to-end, reporting to the CISO. You will write code against APIs, automate evidence pipelines, and run control testing with clear ownership and SLAs.

You will shape GRC strategy, build a trusted assurance surface for enterprise buyers, and drive ISO 27001 and AI governance alignment in a remote, fast-moving environment.

Qualifications

• Owned at least two full SOC 2 Type II cycles, with aud itor relationships and evidence pipelines.
• Hands-on ISO 27001 experience, including ISMS and surveillance audits.
• Experience building automations against systems and evidence sources.
• Clear opinions on compliance platforms and patterns for leverage.
• Strong risk management practice and vendor risk familiarity.
• Excellent written and verbal communication for auditors and engineers.

Responsibilities

• Own SOC 2 Type II end-to-end, including audit scope and evidence pipeline.
• Drive ISO 27001 certification and maintain ISMS over time.
• Automate evidence collection from systems of record and monitor drift.
• Manage risk and vendor risk programs with measurable outcomes.
• Own the customer-facing assurance surface and trust artifacts.
• Shape AI assurance posture and align with regulatory expectations.

Skills

SOC 2 Type II

ISO 27001

Automation scripts

Auditor relationship

Risk management

GRC experience

Tools

Drata

Vanta

GCP

GitHub

Job description

Socket is looking for a Compliance Engineering Lead who will own the compliance program end-to-end, reporting to the CISO. You will write code against APIs, automate evidence pipelines, and run control testing with clear ownership and SLAs.

You will shape GRC strategy, build a trusted assurance surface for enterprise buyers, and drive ISO 27001 and AI governance alignment in a remote, fast-moving environment.