Hybrid Information Security & Compliance Leader

PowerPlan; Atlanta (GA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

PowerPlan is seeking a versatile Information Security & Compliance professional to own governance, audits, and risk in a small team. You’ll manage SOC 1/2 attestations, policy governance, and vendor risk, collaborating with engineering, IT, and the business to protect our SaaS platform used by large utilities.

You’ll work closely with the VP and mentor a junior teammate, helping shape how the team grows. This hybrid role combines onsite collaboration with remote work flexibility.

Qualifications

• Experience in SaaS and cloud environments to discuss risk with engineers.
• Facilitated audits such as SOC 2, ISO 27001 or NIST CSF.
• Eight+ years in cybersecurity compliance, audit or risk management.
• Able to explain risk to engineers and executives.
• Wears many hats with governance and risk expertise.

Responsibilities

• Facilitate SOC 1 and SOC 2 attestations from scoping through fieldwork.
• Own information security policy governance with clear owners.
• Run enterprise security risk program with defined owners and plans.
• Manage vendor risk assessments and select GRC tooling.
• Report program health to leadership and mentor a junior teammate.

Skills

SaaS experience

SOC 2 audits

ISO 27001

NIST CSF

Risk management

Cloud environments

Engineer communication

Tools

Drata

Vanta

Full Circle

UpGuard

Job description

PowerPlan is seeking a versatile Information Security & Compliance professional to own governance, audits, and risk in a small team. You’ll manage SOC 1/2 attestations, policy governance, and vendor risk, collaborating with engineering, IT, and the business to protect our SaaS platform used by large utilities.

You’ll work closely with the VP and mentor a junior teammate, helping shape how the team grows. This hybrid role combines onsite collaboration with remote work flexibility.