Enterprise Compliance & Security Manager

Coval; San Francisco (CA); Presencial; USD 100.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare, Dental, & Vision coverage

401K

Pet friendly-office

Free gym membership

Free lunch and dinner when working in/

Unlimited PTO

Descripción de la vacante

Coval in San Francisco is seeking a Compliance Manager to own security and compliance end to end for enterprise customers in healthcare, fintech, and insurance. You will lead SOC 2, HIPAA, PCI DSS, ISO 27001 programs and manage audits and security reviews to keep customer trust high.

You’ll triage alerts, coordinate with engineers, and drive evidence collection, questionnaires, and vendor risk assessments while collaborating with Sales, Legal, and Product to scale compliance program efficiency.

Formación

• 4+ years in compliance, GRC, security operations, or IT with ownership of an audit cycle for at least one framework.
• Cloud familiarity (AWS or GCP) and ability to read/write simple scripts.
• Experience running a compliance automation platform (Oneleet, Vanta, Drata or similar).
• Experience answering enterprise security questionnaires and supporting security reviews for B2B SaaS.

Responsabilidades

• Own SOC 2 and HIPAA programs; drive PCI DSS and ISO 27001 from in-process to certified.
• Maintain policies, procedures, and the risk register; map controls across frameworks with evidence.
• Take on new frameworks as customer demand grows; prioritize which to pursue.
• Manage auditors, assessors, and the audit calendar; scoping, readiness, fieldwork, remediation.
• Keep the program audit-ready year round; test controls continuously and track gaps to closure.
• Own the Oneleet compliance platform; triage alerts, decide fixes, and route where needed.
• Fix what you can directly (identity settings, vendor items, documentation); write clear tickets for engineering.

Conocimientos

Project management

Communication

Attention to detail

Ambiguity tolerance

Cloud platforms

Scripting basics

Compliance automation experience

Handling security questionnaires

Herramientas

Oneleet

Vanta

Drata

Descripción del empleo

Coval in San Francisco is seeking a Compliance Manager to own security and compliance end to end for enterprise customers in healthcare, fintech, and insurance. You will lead SOC 2, HIPAA, PCI DSS, ISO 27001 programs and manage audits and security reviews to keep customer trust high.

You’ll triage alerts, coordinate with engineers, and drive evidence collection, questionnaires, and vendor risk assessments while collaborating with Sales, Legal, and Product to scale compliance program efficiency.