Remote Security & Compliance Lead

relocity; United States; Remote; USD 140,000 - 170,000; Full time

Benefits offered by this job

Remote workplace with flexible work

Bonus potential

401(k) plan

Professional development opportunities

Health, dental, vision, and long-term/

Job summary

relocity is seeking a Security & Compliance Manager to own an established information security, privacy, and data governance program in a cloud-first setting. You will partner with engineering, product, operations, legal, and admin to ensure systems and policies meet evolving regulatory and security requirements.

The role focuses on leading SOC 2 Type II and ISO 27001 efforts, managing privacy regulations like GDPR/CCPA, and driving risk assessments, remediation, and governance across the

Qualifications

• 3–5 years of experience in information security, data privacy, governance, compliance, or risk management.
• Direct experience maintaining SOC 2 Type II and leading or supporting ISO 27001 certification in SaaS/cloud-first environments.
• Hands-on experience with Vanta or comparable GRC platforms (Drata, Secureframe, Sprinto).
• Working knowledge of GDPR, CCPA, and other privacy regulations.

Responsibilities

• Maintain SOC 2 Type II compliance, including day-to-day control operation, evidence collection, and annual audit readiness.
• Lead ISO 27001 certification from gap assessment through certification and ongoing surveillance audits.
• Advise leadership on security, privacy, and compliance matters and oversee GDPR/CCPA compliance.
• Conduct security risk assessments, manage incident response, and drive remediation across the business.
• Define enterprise data governance standards, including data classification, retention, and lifecycle management.
• Administer Vanta and related GRC tooling to automate compliance monitoring, continuous control testing, and audit workflows.
• Lead company-wide security awareness initiatives and monitor evolving threats and industry best practices.

Skills

Security governance

Regulatory compliance

Cross-functional collaboration

Communication skills

Education

Bachelor's degree in Information Security or related field

Tools

Vanta

Drata

Secureframe

Sprinto

Job description

relocity is seeking a Security & Compliance Manager to own an established information security, privacy, and data governance program in a cloud-first setting. You will partner with engineering, product, operations, legal, and admin to ensure systems and policies meet evolving regulatory and security requirements.

The role focuses on leading SOC 2 Type II and ISO 27001 efforts, managing privacy regulations like GDPR/CCPA, and driving risk assessments, remediation, and governance across the