Remote Security Compliance Lead (SOC 2, PCI)

Mixpeek; Northern (KY); Hybrid; USD 140,000 - 220,000; Full time

Benefits offered by this job

Remote-first culture

MacBook Pro delivered to your door

Home office stipend

Job summary

Sardine is seeking a Security Compliance Lead to own our security compliance and GRC program end-to-end, partnering with auditors, regulators, and internal teams to drive audits and reviews. You will shape the program, manage a growing team, and ensure continuous readiness for audits and customer engagements.

This senior, hands-on role requires deep expertise in SOC 2, PCI DSS, ISO 27001, GDPR/CCPA, and DORA, with strong communication and leadership capabilities to guide cross-functional efforts

Qualifications

• 7+ years in security compliance, GRC, or audit with end-to-end ownership of audit programs (SOC 2, PCI DSS, ISO 27001).
• Deep knowledge of PCI DSS, SOC 2, ISO 27001, GDPR/CCPA, and DORA; familiarity with NIST CSF and CIS.

Responsibilities

• Own compliance planning and program across SOC 2 Type II, PCI DSS Level 1, ISO 27001, GDPR, CCPA, DORA.
• Drive FedRAMP effort with NIST control implementation, 3PAO assessment, and continuous monitoring.
• Serve as primary interface to auditors and regulators and partner with engineering, IT, product, security, and legal teams.

Skills

Security compliance

GRC

Audits

Regulatory frameworks

Executive communication

Leadership

Tools

GRC tooling

Job description

Sardine is seeking a Security Compliance Lead to own our security compliance and GRC program end-to-end, partnering with auditors, regulators, and internal teams to drive audits and reviews. You will shape the program, manage a growing team, and ensure continuous readiness for audits and customer engagements.

This senior, hands-on role requires deep expertise in SOC 2, PCI DSS, ISO 27001, GDPR/CCPA, and DORA, with strong communication and leadership capabilities to guide cross-functional efforts