SaaS Compliance Manager: SOC 2, Privacy & ITGCs

procaresolutions; Denver (CO); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

HSA

Job summary

Procare Solutions is seeking a Compliance Manager in Denver to own the SOC 2 Type 2 program across multiple products and support SOX, privacy, PCI, and HIPAA compliance efforts. You will lead a small team, coordinate with Engineering and IT, and translate regulatory requirements into auditable controls for business units.

The ideal candidate has 4+ years in compliance or IT audit, familiar with GDPR/CCPA, PCIDSS, and common control frameworks, and experienced with cloud environments.

Qualifications

• 4+ years of experience in compliance, information security, or IT audit with direct SOC 2 Type 2 involvement.
• Working knowledge of SOX ITGC concepts, privacy frameworks (GDPR/CCPA), and PCIDSS requirements.
• Experience reviewing contract terms and managing or mentoring junior team members.
• Familiarity with multiple control frameworks (HIPAA, NIST CSF, ISO27001).

Responsibilities

• Own the end-to-end SOC 2 Type 2 audit lifecycle including scoping, control design, evidence collection, auditor liaison, remediation tracking, and continuous monitoring.
• Support ITGC testing and coordination with internal/external auditors for financial reporting compliance.
• Lead privacy audits and dpas documentation (GDPR/CCPA).
• Support PCI assessments including scoping and control validation with engineering teams.
• Review and track DPAs with customers, vendors and subprocessors.
• Assess vendor risk and contractual data protection requirements.
• Design, implement and monitor controls with Engineering, IT and Security.
• Maintain and evolve compliance policies, procedures, and control narratives; ensure training is delivered.
• Serve as a point of contact for auditors and customer security questionnaires.
• Identify opportunities to automate evidence collection and improve control monitoring.

Skills

SOC 2 Type II audits

ITGC/SOX

Privacy frameworks

Regulatory compliance

Vendor risk management

Education

Bachelor's degree

Tools

Vanta

Drata

OneTrust

ServiceNow GRC

Job description

Procare Solutions is seeking a Compliance Manager in Denver to own the SOC 2 Type 2 program across multiple products and support SOX, privacy, PCI, and HIPAA compliance efforts. You will lead a small team, coordinate with Engineering and IT, and translate regulatory requirements into auditable controls for business units.

The ideal candidate has 4+ years in compliance or IT audit, familiar with GDPR/CCPA, PCIDSS, and common control frameworks, and experienced with cloud environments.