GRC Compliance Lead: SOC 2 & ISO 27001

Sourcegraph, Inc.; United States; Remote; USD 103,000 - 138,000; Full time

Job summary

Sourcegraph is seeking a Compliance Manager to lead governance, risk, and ISMS initiatives across our distributed organization. You will own audits, certifications, and the ongoing control framework, partnering with Security, IT, Legal, and Engineering to tailor requirements to our cloud environment.

You will drive remediation, maintain risk registers, and guide internal teams on compliance responsibilities, including customer assurance tasks.

Qualifications

• 5+ years of experience in governance, risk, compliance, or information security roles.
• Proven ownership of end-to-end SOC 2 and ISO 27001 programs.
• Experience managing external audits and certification processes.

Responsibilities

• Own Sourcegraph's governance, risk, and ISMS program development and maintenance.
• Lead audit activities, evidence collection, and remediation.
• Tailor controls to Sourcegraph’s environment and coordinate with auditors.
• Maintain ISMS processes, policies, and compliance documentation.
• Support customer-facing compliance responses and security questionnaires.

Skills

Governance

Risk management

ISMS

Audit management

Security compliance

Cloud environments

Education

Security certifications (CISA/CISSP)

Tools

GRC platforms

Job description

Sourcegraph is seeking a Compliance Manager to lead governance, risk, and ISMS initiatives across our distributed organization. You will own audits, certifications, and the ongoing control framework, partnering with Security, IT, Legal, and Engineering to tailor requirements to our cloud environment.

You will drive remediation, maintain risk registers, and guide internal teams on compliance responsibilities, including customer assurance tasks.