Remote Senior Compliance & Data Privacy Lead (SOC 2)

Horizon3; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Growth opportunities

Innovation-driven culture

Inclusive and diverse team

Remote work environment

Job summary

Horizon3 is seeking a Senior Compliance Analyst to join our Security team, focusing on Governance, Risk, and Compliance (GRC). You will serve as a subject matter expert for compliance and data privacy, managing inbound customer security requests and leading audit preparation to support a strong security posture.

You will coordinate SOC 2 Type II efforts, maintain control environments across SOC 2, ISO 27001, NIST RMF, and related frameworks, and partner with Engineering, Legal, and Product to

Qualifications

• 4–6+ years of experience in security compliance, risk, or privacy—preferably in a B2B SaaS or cybersecurity company.
• Experience leading SOC 2 Type II audits from start to finish.
• Strong communication skills translating complex compliance concepts for both technical and non-technical stakeholders.
• Familiarity with security questionnaires, RFPs, and customer audits.
• Experience with privacy-by-design and data minimization practices.

Responsibilities

• Lead SOC 2 Type II compliance efforts, including control mapping and audit coordination.
• Maintain and improve control environment for SOC 2 and ISO 27001, NIST RMF, DORA, and NIST 800-53.
• Collaborate with Engineering, IT, Legal, HR to implement control requirements.
• Oversee privacy program to ensure GDPR, CCPA/CPRA, EU AI Act compliance.
• Manage RoPAs, DSARs, PIAs and privacy-by-design initiatives.
• Own third-party risk management lifecycle and vendor due diligence.
• Respond to customer security questionnaires, RFPs, and due diligence requests.
• Assist Sales, Customer Success, and Legal to build trust in security/compliance posture.

Skills

SOC 2 Type II

GDPR

CCPA/CPRA

ISO 27001

NIST 800-53

NIST AI RMF

Data privacy

Audit management

Security questionnaires

Education

CIPP/US

CISA

CIPT

CRISC

ISO Lead Implementer

Tools

AWS

Okta

MDM

SIEM

DLP

Job description

Horizon3 is seeking a Senior Compliance Analyst to join our Security team, focusing on Governance, Risk, and Compliance (GRC). You will serve as a subject matter expert for compliance and data privacy, managing inbound customer security requests and leading audit preparation to support a strong security posture.

You will coordinate SOC 2 Type II efforts, maintain control environments across SOC 2, ISO 27001, NIST RMF, and related frameworks, and partner with Engineering, Legal, and Product to