Remote Compliance Engineering Lead — Automate SOC 2 & ISO 27001

Socket; United States; On-site; USD 180,000 - 270,000; Full time

Benefits offered by this job

Market competitive salary bands

Meaningful equity program

Comprehensive health benefits for you/

Flexible time-off, holidays, winter休止休

Paid parental leave

Remote-first, quarterly team off-sites

Job summary

Socket is seeking a Compliance Engineering Lead to own compliance as an engineered system, reporting to the CISO. You will build an automated evidence pipeline, manage SOC 2 Type II and ISO 27001 efforts, and shape GRC at Socket.

This role emphasizes cross-functional collaboration with Legal, Engineering, and GTM, and involves leading a first teammate focused on security questionnaires and contracts. You will define the compliance platform, drive continuous improvement, and oversee risk

Qualifications

• Own two full SOC 2 Type II cycles, including auditor relationships, scoping, evidence, and findings.
• Deep experience with ISO 27001 through certification or ISMS surveillance audits.
• Build and maintain automations against services (GCP, GitHub, identity providers, MDM, ticketing).
• Hands-on experience with Drata, Vanta, or similar platforms and know their leverage points.
• Ability to prioritize real risk vs auditor formatting and focus the company on material issues.
• Excellent writing that stands up to auditors, enterprise security reviewers, engineers, and executives.
• Comfort working across Security, Engineering, Legal, and Go-to-Market in a remote, fast-moving environment.
• Exposure to AI governance frameworks (ISO/IEC 42001, NIST AI RMF, EU AI Act) is a plus.

Responsibilities

• Own SOC 2 Type II end-to-end, including scope, evidence pipeline, and the report.
• Lead ISO 27001 certification efforts and keep ISMS alive post-certification.
• Automate evidence collection from systems of record and monitor for drift.
• Develop risk and vendor risk programs with external security partners and renewal cadences.
• Own the customer-facing assurance surface and maintain the trust portal with artifacts.
• Define and scope AI assurance posture and relevant standards.

Skills

SOC 2 Type II cycles ownership

ISO 27001 depth

Automation

Drata / Vanta experience

Prioritization skills

Technical writing

Cross-functional collaboration

Remote work experience

AI governance frameworks exposure

Tools

Drata

Vanta

Job description

Socket is seeking a Compliance Engineering Lead to own compliance as an engineered system, reporting to the CISO. You will build an automated evidence pipeline, manage SOC 2 Type II and ISO 27001 efforts, and shape GRC at Socket.

This role emphasizes cross-functional collaboration with Legal, Engineering, and GTM, and involves leading a first teammate focused on security questionnaires and contracts. You will define the compliance platform, drive continuous improvement, and oversee risk