Remote SOC 2 & IT Security Manager

Slang AI; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Slang AI in New York offers a hybrid/remote role for a Compliance & IT Security Manager who will own SOC 2 programs and IT operations. You will coordinate audits, maintain security policies, and manage the risk registry while supporting daily Google Workspace administration and SSO across SaaS tools.

The ideal candidate brings 7+ years in IT security/compliance, strong policy-writing skills, and experience with cloud-based security tools and vendor risk management.

Qualifications

• 7+ years in IT administration, security and compliance or related field.
• Bachelor's or Master's in Cybersecurity/related field.
• Experience through SOC 2 audits including evidence collection and auditor coordination.

Responsibilities

• Own and maintain security and compliance programs, SOC 2 readiness, and audit coordination.
• Manage security policies to reflect regulatory requirements and best practices.
• Maintain and update the risk registry with risks, mitigations and timelines.
• Plan and execute regular compliance activities including backup tests and access reviews.
• Coordinate annual penetration tests and remediate findings.
• Manage vendor reviews, SOC 2 reports, DPAs, and vendor risk.

Skills

SOC 2 audits

Google Workspace admin

SSO configuration

Identity management

Risk registry

Security policies

Audit evidence

Drata automation

Cloud security

Scripting (Python)

Vendor risk

Security awareness

Education

Bachelor's or Master's in Cybersecurity

Tools

Okta

Rippling

JumpCloud

Kandji

Jamf

Microsoft Intune

Drata

Vanta

Job description

Slang AI in New York offers a hybrid/remote role for a Compliance & IT Security Manager who will own SOC 2 programs and IT operations. You will coordinate audits, maintain security policies, and manage the risk registry while supporting daily Google Workspace administration and SSO across SaaS tools.

The ideal candidate brings 7+ years in IT security/compliance, strong policy-writing skills, and experience with cloud-based security tools and vendor risk management.