Enterprise Compliance & Security Manager for AI Ops

Duvo Inc; United States; Teletrabalho; USD 140 000 - 200 000; Tempo integral

Resumo da oferta

Duvo Inc. is building an AI operations platform for enterprises. You will own the ISMS, manage audits, and lead evidence gathering to support SOC 2, ISO 27001, and related controls.

This sole-occupant role reports to the Head of Engineering and works closely with Security Lead to maintain a trusted security posture. You will shape the questionnaire library, govern vendor risk, and ensure timely, accurate responses for buyers, auditors, and regulators.

Qualificações

• Delivered end-to-end SOC 2 / ISO certifications through formal audit cycles.
• Ability to produce precise, evidenced answers for auditors and regulators.
• Experience building or running a vendor review and subprocessor process.
• Strong evidence discipline to capture artifacts during ongoing work.

Responsabilidades

• Own the ISMS, AIMS and related governance artifacts and their lifecycle.
• Lead intake, evidence gathering, and audit liaison with security, engineering, and product.
• Maintain the vendor policy, tier data access and due diligence processes.
• Collaborate on questionnaire design and ensure timely, accurate responses.
• Drive continuous improvement of trust center documentation and controls.

Conhecimentos

Certification management

Auditing & evidence

Vendor risk management

Policy governance

AI tooling usage

Plain writing

Ferramentas

Vanta

Drata

Mycroft

Segregato

Descrição da oferta de emprego

Duvo Inc. is building an AI operations platform for enterprises. You will own the ISMS, manage audits, and lead evidence gathering to support SOC 2, ISO 27001, and related controls.

This sole-occupant role reports to the Head of Engineering and works closely with Security Lead to maintain a trusted security posture. You will shape the questionnaire library, govern vendor risk, and ensure timely, accurate responses for buyers, auditors, and regulators.