Remote Director of Data Security & Compliance

Syllo; United States; Remote; USD 200,000 - 225,000; Full time

Benefits offered by this job

Equity options

Medical, dental, vision

Paid time off

Job summary

Syllo, a leader in Litigation AI, seeks a Director of Data Security Compliance to own end-to-end programs. You will manage SOC 2 Type II and ISO 27001 cycles, ensure policy alignment, and coordinate cross‑functional privacy and security initiatives.

You will run vendor security questionnaires, define software acceptance criteria, respond to incidents, and build scalable policy infrastructure while inheriting an active program and growing the team.

Qualifications

• Built and run SOC 2 and ISO 27001 programs with external audits.
• Developed VSQ processes and responded to security questionnaires under time pressure.
• Designed data handling policies, DR documentation, and incident procedures.
• Understands privacy regimes and translates requirements into process.
• Knows when to elevate issues and when to resolve at working level.
• Familiar with security infrastructure underpinning compliance programs.

Responsibilities

• Own the compliance program end to end for SOC 2 Type II and ISO 27001.
• Run the VSQ process across the enterprise sales pipeline with timely responses.
• Build and maintain policy infrastructure for data handling and DR.
• Define software acceptance and security configuration standards.
• Coordinate incident response with the appropriate owners.
• Own privacy processes and ensure regulatory inquiries are handled.
• Advise cross-functionally across operations and commercial teams.

Skills

Compliance program ownership

VSQ and audit cycle depth

Policy and DR design

Privacy regulation fluency

Cross-functional judgment

Security program literacy

Education

Bachelor's degree

Advanced degree

CISSP/CISM certification

Job description

Syllo, a leader in Litigation AI, seeks a Director of Data Security Compliance to own end-to-end programs. You will manage SOC 2 Type II and ISO 27001 cycles, ensure policy alignment, and coordinate cross‑functional privacy and security initiatives.

You will run vendor security questionnaires, define software acceptance criteria, respond to incidents, and build scalable policy infrastructure while inheriting an active program and growing the team.