Enterprise Security Compliance & Audit Lead

Anyscale; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Anyscale is seeking a seasoned Governance, Risk, and Compliance leader to own SOC 2 Type II and ISO 27001 programs, manage evidence, and coordinate external audits across engineering, IT, legal, and sales. This program-ownership role requires autonomy and accountability.

You will build a defensible evidence base, mature the risk register, and enable enterprise security diligence for regulated customers with a broad internal partnership.

Qualifications

• 7+ years in governance, risk, and compliance.
• Experience owning security programs (SOC 2 Type II, ISO 27001).
• Experience fronting security diligence for enterprise or regulated customers.

Responsibilities

• Own SOC 2 Type II and ISO 27001 programs, including scope, evidence, controls, and auditor relationships.
• Develop and maintain the control evidence base in our compliance automation platform.
• Lead security diligence for enterprise/regulatory customers: questionnaires, audit responses, and right-to-audit requests.
• Own the risk register and mature risk management as a enterprise-wide program.
• Coordinate compliance obligations in customer contracts with legal, including data protection and breach timelines.
• Assess and stand up new certifications as needed by customers.

Skills

Governance

Risk management

Compliance

Security controls

Cloud/SaaS

Audits coordination

Tools

Vanta

Job description

Anyscale is seeking a seasoned Governance, Risk, and Compliance leader to own SOC 2 Type II and ISO 27001 programs, manage evidence, and coordinate external audits across engineering, IT, legal, and sales. This program-ownership role requires autonomy and accountability.

You will build a defensible evidence base, mature the risk register, and enable enterprise security diligence for regulated customers with a broad internal partnership.