Remote Security & Compliance Lead (ISO27001/SOC 2)

Mozilla Corporation; United States; Remote; USD 92,000 - 138,000; Full time

Benefits offered by this job

Generous bonus plans

Medical, dental, and vision coverage

Generous retirement contributions with

One-time home office stipend

Annual professional development budget

Quarterly wellness stipend

Parental leave

Job summary

The Mozilla Corporation is seeking an experienced information security professional to lead governance, risk, and compliance within the Security team. You will manage the ISMS, maintain the SoA, and help drive audits for ISO 27001 and SOC 2 Type 2.

You will work with Engineering, Legal, Privacy, and Product leadership to translate compliance into practical safeguards and scalable processes.

Qualifications

• 5+ years in information security, GRC, or compliance roles.
• Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria.
• Experience across the full ISMS breadth: SoA maintenance, MRMs, System Description authorship.
• Strong policy writing and cross-functional review experience.
• Proven ability to translate compliance requirements into actionable workflows.

Responsibilities

• Maintain and mature the ISMS including SoA and MRM cadence.
• Support ISO 27001 and SOC 2 Type 2 audit execution and documentation.
• Contribute to SOC 2 System Description and audit narratives.
• Track gaps and remediation from readiness assessments and audits.
• Lead policy program creation, revision, and cross-functional reviews.
• Support scaling of compliance as new products or units pursue readiness.

Skills

GRC

ISO 27001

SOC 2

ISMS maintenance

Policy development

Audit readiness

Job description

The Mozilla Corporation is seeking an experienced information security professional to lead governance, risk, and compliance within the Security team. You will manage the ISMS, maintain the SoA, and help drive audits for ISO 27001 and SOC 2 Type 2.

You will work with Engineering, Legal, Privacy, and Product leadership to translate compliance into practical safeguards and scalable processes.