Remote InfoSec Risk & Compliance Leader (SOC 2/PCI)

Ladders; United States; Remote; USD 102,000 - 138,000; Full time

Benefits offered by this job

Health benefits

Dental and vision benefits

401(k) match

Annual cash bonus

Pet insurance

Mental health resources

Volunteer PTO

Employee stock program

Job summary

Ladders is seeking a Senior InfoSec Risk & Compliance Specialist to strengthen a mature risk and compliance program in healthcare. You will partner with auditors and internal teams to ensure SOC 2, SOX, and PCI readiness while translating findings into prioritized risk actions.

This remote US-based role emphasizes practical governance, automation of compliance workflows, and building a scalable control environment that supports multiple obligations without adding headcount.

Qualifications

• 5–7+ years in IT Audit, GRC, controls, risk assessment, or internal audit.
• 1+ year in SOC 2 readiness or equivalent compliance work.
• Certifications: CISA/CISM/CISSP/CRISC/CRMA or eligible.
• Familiar with NIST, COSO, COBIT.
• Experience using AI tools for compliance tasks and building automated workflows.
• Ability to identify problems and implement technology-based improvements.
• Strong communication for mentoring and stakeholder management.

Responsibilities

• Support SOC 2, SOX, and PCI audits with auditors and internal teams.
• Design continuous monitoring systems to detect control failures in real time.
• Identify modernization opportunities in compliance processes.
• Connect compliance findings to organizational risk and prioritize remediation efforts.
• Build a flexible foundation of controls to meet multiple regulatory obligations without increasing headcount.
• Provide coaching and feedback to junior team members, fostering future leadership skills.
• Communicate updates and insights to business teams with a proactive approach.

Skills

IT Audit

GRC

Controls

Risk Assessment

Internal Audit

Education

CISA

CISM

CISSP

CRISC

CRMA

Tools

AI tools

Automation workflows

Job description

Ladders is seeking a Senior InfoSec Risk & Compliance Specialist to strengthen a mature risk and compliance program in healthcare. You will partner with auditors and internal teams to ensure SOC 2, SOX, and PCI readiness while translating findings into prioritized risk actions.

This remote US-based role emphasizes practical governance, automation of compliance workflows, and building a scalable control environment that supports multiple obligations without adding headcount.