Remote Security & Compliance Leader

Tandem Inc.; Northern (KY); Remote; USD 175,000 - 200,000; Full time

Benefits offered by this job

Remote work across US & Canada

Flexible vacation policy

Parental leave & sick policy

Free health, dental & vision for you &

Job summary

Rebuy is seeking a senior security, compliance, privacy, and IT leader to own programs across the company. Reporting to the COO, you’ll drive governance, risk, privacy, and cloud security while partnering with DevOps and Legal to protect data and systems.

You’ll set direction, run audits, manage incident response, and lead a remote IT and security team. This role demands influence without authority and a hands-on, operational mindset in a fast-moving environment.

Qualifications

• 8+ years in security and GRC with end-to-end SOC 2 Type 2 ownership.
• Hands-on security of major cloud environments (GCP preferred).
• Knowledge of GDPR, CCPA/CPRA, and data governance.
• Experience with compliance automation and security tooling.
• Ability to influence executives and communicate risk in business terms.

Responsibilities

• Lead governance, risk and compliance programs, including audits.
• Own policy, risk and vendor risk management.
• Manage incident response and cyber insurance processes.
• Oversee privacy and data governance programs and DPIAs.
• Collaborate with DevOps/Engineering to embed security in CI/CD.
• Oversee IT operations and security across remote workforce.
• Report to executive leadership and manage security budget.

Skills

GRC leadership

Security strategy

Executive reporting

Incident response

Cloud security

Privacy governance

Data governance

Tools

Vanta

Orca

Iru

SAST

CI/CD security

Secrets management

Cloud IAM

Job description

Rebuy is seeking a senior security, compliance, privacy, and IT leader to own programs across the company. Reporting to the COO, you’ll drive governance, risk, privacy, and cloud security while partnering with DevOps and Legal to protect data and systems.

You’ll set direction, run audits, manage incident response, and lead a remote IT and security team. This role demands influence without authority and a hands-on, operational mindset in a fast-moving environment.